← All Tools
SSVC Decision Tree
CISA Stakeholder-Specific Vulnerability Categorization — the CISA SSVC decision tree, Track / Track* / Attend / Act outcomes.
Implements the CISA SSVC decision tree (CISA Levels v1.1.0) verbatim — the four CISA decision points
Exploitation, Automatable, Technical Impact and Mission & Well-Being. Source:
cisa.gov/ssvc.
This is the CISA tree, not the separate CERT/CC Deployer tree (which uses an Exposure point this tool does not).
🔒 100% client-side. No data leaves your browser.
Optional context (recorded with the export):