# Three hundred alerts, three that matter.

Source: https://libwatch.com/en/features/prioritization

Feature · Prioritization

A vulnerability's severity doesn't tell you whether it will be exploited. LibWatch puts vulnerabilities already under attack first, sorts the others by severity and shows their exploit probability.

[Sort my vulnerabilities](https://app.libwatch.com/users/sign_up)

Three signals

EPSS

Exploit probability

FIRST's score, updated daily: the likelihood that a vulnerability will be exploited within 30 days.

KEV

Observed exploitation

CISA's catalog of vulnerabilities exploited in the wild. A KEV vulnerability goes to the top.

CERT-FR

French alerts

ANSSI's advisories and alerts on PHP, matched against your projects' PHP version.

Example

## Same severity, different priorities

Fictional example: three vulnerabilities rated “high.” The exploited one goes to the top; EPSS, shown alongside, helps tell the other two apart.

| Vulnerability | Severity | EPSS | Exploited | LibWatch order |
| --- | --- | --- | --- | --- |
| Vulnerability A · payment package | High | 62% | Yes · KEV | First · KEV |
| Vulnerability B · image library | High | 8% | No | By severity |
| Vulnerability C · testing tool | High | 0.2% | No | By severity |

In your alerts

## An “exploited only” filter, and an alert when that changes

Filter on exploited vulnerabilities, and get notified when an already known vulnerability enters the KEV catalog.

Frequently asked questions

## About prioritization

### Is a vulnerability without an EPSS score ignored?

 No. EPSS changes neither the order nor the score: a vulnerability without EPSS is ranked by its severity, like the others.

### Is CVSS still shown?

 Yes. Each vulnerability keeps its CVSS score, which sets its severity: critical from 9, high from 7 to 8.9. A vulnerability in the KEV catalog goes ahead of the others; EPSS is shown as well, without changing the order.

### Can I set my own alert thresholds?

 You choose which alerts you receive: critical vulnerabilities (CVSS 9 and above), major ones (7 to 8.9) or minor ones, a vulnerability entering the KEV catalog, the Monday digest. There is no EPSS threshold to set.

## Start with the three vulnerabilities that matter.

[Try it for 14 days](https://app.libwatch.com/users/sign_up)