Why a Coalition’s Release of a Security Vulnerability Exploit Scoring System Demands Attention

**SAN FRANCISCO — June 15, 2023** — Coalition, the world’s first Active Insurance provider designed to prevent digital risk before it strikes, has announced the launch of their Coalition Exploit Scoring System (Coalition ESS). Developed by Coalition Security Labs, the company’s research and innovation center, Coalition ESS is a unique vulnerability scoring system that aims to assist risk managers in mitigating potential cyber threats. By leveraging real-time monitoring and dynamic scoring, Coalition ESS provides businesses with an efficient way to understand and prioritize vulnerabilities for patching.

### The Need for Efficient Cybersecurity Solutions

In the landscape of incessant cyber threats, timing is critical. According to Tiago Henriques, Coalition‘s Head of Security Research, thousands of new vulnerabilities are published monthly, making it nearly impossible for IT and security teams to keep up with the ever-growing list of potential risks. In response to this overwhelming challenge, Coalition ESS provides a streamlined approach that allows defenders to sift through the noise and focus on mitigating the most significant vulnerabilities before an incident occurs.

### Making Use of Artificial Intelligence and Language Modeling

Coalition ESS utilizes artificial intelligence and large language modeling to scan the descriptions used within newly released Common Vulnerabilities and Exposures (CVEs). By comparing these descriptions to previously published vulnerabilities, the system predicts the likelihood of exploitability. This prediction results in two probability scores: the Exploit Availability Probability, which gauges the likelihood of an exploit code becoming publicly available, and the Exploit Usage Probability, which assesses the likelihood of threat actors using the exploit to execute an attack.

### Dynamic Scoring for Real-Time Response

One of the standout features of Coalition ESS is its dynamic scoring mechanism. Unlike traditional vulnerability scoring systems like the Common Vulnerability Scoring System (CVSS), Coalition ESS responds to changes in available exploit information. This ensures that security managers and IT professionals are equipped with up-to-date prioritization lists that outline the vulnerabilities posing the greatest threat. Additionally, Coalition ESS scores are available up to one week from the initial vulnerability announcement, significantly reducing the time it takes to score a vulnerability compared to other systems that can take up to a month.

### A Tool for the Broader Community

Coalition ESS was created to prioritize the vulnerability management efforts of Coalition itself, an insurance provider defending hundreds of thousands of customer assets at scale. The company now intends to make this valuable tool available to the wider community, recognizing that a collective effort is needed to combat the ever-evolving cyber threat landscape. With its commitment to transparency and collaboration, Coalition invites public use of the Coalition ESS at ess.coalitioninc.com.

### The Importance of Prioritizing Vulnerability Remedy

The launch of the Coalition Exploit Scoring System highlights the pressing need for effective vulnerability management in the face of growing cybersecurity risks. The sheer volume of vulnerabilities being discovered requires a sophisticated and efficient approach to prioritize remediation efforts. Coalition ESS represents a significant step forward in this regard, empowering organizations to allocate their time and resources to tackling the vulnerabilities that pose the greatest threat.

## Conclusion: A Step Forward in Cybersecurity

As the world becomes increasingly interconnected, the importance of robust cybersecurity measures cannot be overstated. The launch of the Coalition Exploit Scoring System demonstrates the ongoing commitment to innovation within the cybersecurity community. By leveraging cutting-edge technologies such as artificial intelligence and language modeling, Coalition ESS offers a dynamic and efficient solution for risk managers to navigate the complex landscape of vulnerabilities. As organizations continue to grapple with the high stakes of cyber threats, powerful tools like Coalition ESS will play a crucial role in defending against potential attacks.

*Note: This article has been prepared based on the information provided in the press release. The New York Times does not have access to the Coalition ESS system and cannot independently verify its effectiveness.*