Overview
Hyver uses a proprietary algorithm to rank security findings by how much they reduce your organization’s cybersecurity exposure. This ranking isn’t one-size-fits-all — you can influence it by selecting your organization’s priorities, helping Hyver tailor Mitigation Plans that align with your business goals.
How Prioritization Works
Hyver considers multiple risk factors when prioritizing findings, including:
Severity of the finding
Critical to block status (i.e., if it cuts off a high-risk attack route)
Probability of exploitation
Organizational importance of the affected business asset
Overall exposure impact
These variables are combined to determine which findings will deliver the most value when mitigated.
Setting Prioritization Objectives
You can customize how findings are prioritized by setting the organization’s primary objectives. This influences how Hyver builds Mitigation Plans and assigns remediation priority across findings.
The default prioritization method is based on exposure — the combination of breach likelihood and business impact. This approach helps security teams focus on the vulnerabilities that pose the greatest financial and operational risk.
Why It Matters
By adjusting prioritization settings, you ensure Hyver:
Focuses mitigation on the most impactful findings
Aligns risk reduction with your business strategy
Creates tailored plans that balance technical urgency and organizational value
Important notes
These settings are typically configured during onboarding, but can be adjusted anytime by an Administrator.
Changing priorities will immediately affect how new mitigation plans are generated.
Wrap-up / Next Steps
Hyver’s prioritization logic does the heavy lifting — you just need to set the direction. By aligning mitigation priorities with your risk strategy, you can make every remediation effort count.
