Risk score - ML-powered incident prioritization
Release date: December 17, 2025
We're excited to introduce risk score — an ML-powered feature available to Business workspaces that helps you focus on the incidents that matter most.
What's new
Each incident now includes a risk score ranging from 0 to 100, where 100 indicates the highest risk and 0 the lowest. The score automatically assesses threat level by analyzing multiple signals including secret type, validity, detection context, and exposure patterns.
Key capabilities:
- Granular prioritization: 0-100 scale for fine-tuned incident triage
- Flexible filtering and sorting: Filter by risk score range and sort by priority in your incidents table
- Updated "Critical" saved view: Now shows incidents with risk score above 80 for immediate focus on highest-priority threats
- Availability: Risk score is available for both Internal Monitoring and Public Monitoring on the Business & Enterprise plans.
Why it matters
The risk score cuts through the noise and helps you focus on critical incidents first. No more asking "where do I start?" or "which incidents are truly important?"—the ML model does the prioritization work for you.
📖 Learn more: How Machine Learning Transforms Security Alert Chaos into Actionable Intelligence
Enhancements
- Detectors: Some detectors are now flagged as non-business and disabled by default for business accounts to reduce noise (related incidents are therefore hidden). Use the new "Recommended for business" filter in detector settings to identify and re-enable them if needed.
