Free tools to support your medical device cybersecurity risk management process.
CVSS 3.1 Security Vulnerability Scoring
Score medical device vulnerabilities using standard CVSS v3.1 base metrics, or a guided questionnaire adapted from MITRE's "Rubric for Applying CVSS to Medical Devices." Build a findings table and export it to CSV.
CVSS 4.0 Security Vulnerability Scoring
Score medical device vulnerabilities using standard CVSS v4.0 base metrics, including Attack Requirements and separate Vulnerable System / Subsequent System impact metrics. Build a findings table and export it to CSV.
VEX Generator
Create standards-compliant VEX (Vulnerability Exploitability eXchange) documents in CycloneDX format through a guided wizard. Export machine-readable JSON plus a human-readable HTML/PDF report.