Research Brief + Chart Pack

Tap any chart to open it full-size in a new tab. Each chart is downloadable as a clean PDF and PNG.

KEV additions by year
Catalog growth by year (dateAdded).
View full size Download PDF Download PNG

Ransomware-flagged KEVs by year
Used in known ransomware campaigns (flag).
View full size Download PDF Download PNG

Top KEV vendors
Where exploitation concentrates.
View full size Download PDF Download PNG

Top KEV products
Commonly exploited products.
View full size Download PDF Download PNG

Outcome breakdown
What exploit outcomes imply for recovery complexity.
View full size Download PDF Download PNG

Platform/vendor buckets
Major platform concentration view.
View full size Download PDF Download PNG

Median incident costs (log)
Median per-incident costs across datasets (log scale).
View full size Download PDF Download PNG

Mean vs median (log)
Why “average incident cost” misleads (heavy-tail).
View full size Download PDF Download PNG

Offer: strategy session

Book a strategy session to see how fast you can expect to recover with your current setup — and what changes would materially reduce downtime.

Key terms (plain English)

CISA — Cybersecurity and Infrastructure Security Agency (U.S.).

KEV — Known Exploited Vulnerabilities. Exploited in real attacks.

CVE — Common Vulnerabilities and Exposures. Vulnerability ID.

OCE — Office of the Chief Economist (CISA). Incident cost research.

RCE — Remote Code Execution. Run code remotely.

DRaaS — Disaster Recovery as a Service. Managed recovery.

Offer

Strategy session: See how fast you can expect to recover with your current setup.