Examples
Examples
Try the starting example
- Assets: ID, patch release date, installed date or none, supplied exposure weight
- A,2026-10-01,2026-10-11,2 B,2026-10-10,none,1 C,2026-11-01,none,5
- Audit date
- 2026-10-20
- Observed unpatched elapsed days by asset
- A: 10; B: 10; C: 0
- Weighted exposure asset-days
- 30
- Released assets still unpatched at audit
- B
- Mean completed release-to-install days
- 10
- Total unweighted exposure asset-days
- 20
Try another scenario
- Assets: ID, patch release date, installed date or none, supplied exposure weight
- A,2026-10-01,2026-10-11,2 B,2026-10-10,none,1 C,2026-11-01,none,5
- Audit date
- 2026-10-25
- Observed unpatched elapsed days by asset
- A: 10; B: 15; C: 0
- Weighted exposure asset-days
- 35
- Released assets still unpatched at audit
- B
- Mean completed release-to-install days
- 10
- Total unweighted exposure asset-days
- 25
Calculation method
Calculation method
Observed unpatched elapsed days by asset
max(0,min(observed install date,audit)−release date); an install after audit remains open at audit.
Weighted exposure asset-days
Sum exposure days×supplied asset weight.
Released assets still unpatched at audit
Release≤audit and no install on/before audit.
Mean completed release-to-install days
Average elapsed days for installs observed by audit; exclude ongoing and unreleased records.
Total unweighted exposure asset-days
Sum asset exposure days, excluding future release intervals.
Symbols and units
- a
- Assets: ID, patch release date, installed date or none, supplied exposure weight
- b
- Audit date
Use the units shown. A list keeps the order in which you enter its values. The symbol ^ means “raised to the power of”.
Assumptions & limits
Assumptions & limits
- A descriptive supplied-date patch-exposure worksheet, not a vulnerability severity model, exploit prediction or patch deployment. Weights are user assessments and are not inferred from public advisories.
Are these inputs private?
These calculations run in your browser. A shared link contains the values you choose to share. Only questions submitted to the separate AI finder are sent to OpenAI.
Further reading
Background reading; this does not imply endorsement or independent review of SumFizz.