📊 Vendor Security Scorecards
How do software vendors compare on security? Scores based on CVE count, severity distribution, and historical data.
⚠️ Note: More CVEs doesn't always mean less secure - popular software gets more scrutiny. Use these scores as one data point, not the final word.
📐 Methodology
Security scores are calculated based on:
- Critical CVEs: Weighted 10x
- High CVEs: Weighted 5x
- Medium CVEs: Weighted 2x
- Low CVEs: Weighted 1x
Scores are normalized by total CVE count so larger vendors aren't unfairly penalized. A vendor with 1000 CVEs and 10 critical isn't necessarily worse than one with 10 CVEs and 2 critical.
Grades: A (80-100), B (60-79), C (40-59), D (20-39), F (0-19)