# Helping Enterprises & Governments Adopt Stakeholder Specific Vulnerability Categorization (SSVC)

DevFeed: [Helping Enterprises & Governments Adopt Stakeholder Specific Vulnerability Categorization (SSVC)](<https://devfeed.tech/articles/helping-enterprises-governments-adopt-stakeholder-specific-vulnerability-categorization-ssvc-91451.md>)

Original publisher: [Read original article](<https://www.vulncheck.com/blog/automating-ssvc>)

Author: Patrick Garrity

Published: 2025-02-13T00:00:00Z

Content type: release

Language: en

Sources: [VulnCheck](<https://devfeed.tech/sources/vulncheck.md>)

Topics: [CVSS v4.0](<https://devfeed.tech/topics/cvss-v4-0.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>)

Tags: [adopting](<https://devfeed.tech/tags/adopting.md>), [adoption](<https://devfeed.tech/tags/adoption.md>), [agencies](<https://devfeed.tech/tags/agencies.md>), [api](<https://devfeed.tech/tags/api.md>), [automate](<https://devfeed.tech/tags/automate.md>), [automated](<https://devfeed.tech/tags/automated.md>), [cisa](<https://devfeed.tech/tags/cisa.md>), [coverage](<https://devfeed.tech/tags/coverage.md>), [cve](<https://devfeed.tech/tags/cve.md>), [data-validation](<https://devfeed.tech/tags/data-validation.md>), [efficiency](<https://devfeed.tech/tags/efficiency.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [enrichment](<https://devfeed.tech/tags/enrichment.md>), [enterprises](<https://devfeed.tech/tags/enterprises.md>), [exploitation](<https://devfeed.tech/tags/exploitation.md>), [faster](<https://devfeed.tech/tags/faster.md>), [federal-agencies](<https://devfeed.tech/tags/federal-agencies.md>), [intelligence](<https://devfeed.tech/tags/intelligence.md>), [vulncheck](<https://devfeed.tech/tags/vulncheck.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

VulnCheck says it automates three SSVC decisions for CVEs--Exploitation, Automatable, and Technical Impact--using vulnerability and exploitation intelligence, following CISA's SSVC Guide structure. The excerpt reports coverage of 244,866 CVEs for VulnCheck versus 64,142 for CISA Vulnrichment, and highlights more exploitation evidence and more timely node generation. It provides an example where CISA labels exploitation as POC and VulnCheck as ACTIVE, while both return NO for Automatable and TOTAL for Technical Impact. VulnCheck reports match rates against CISA decisions, but says a manual audit found inconsistencies in some CISA decisions that may affect those comparisons. The source presents these figures and observations as the vendor's claims.

## Source excerpt

VulnCheck now provides automated SSVC decisions for federal and enterprise agencies.