Formulas Tab

Where: /dev/org-control/risk-configuration → Formulas tab

The Formulas tab shows the mathematical expressions used to calculate each module's score. This is an advanced feature — most users won't need to change anything here.

What You See

A table listing all formulas. Each row shows:

Column	What It Shows
Name	Formula name (e.g., "ASM Score", "BP Score")
Expression	The mathematical expression
Description	What the formula does
Linked Module	Which module uses this formula

What Are Formulas?

A formula is the mathematical expression that turns raw detection data into a score. Each module has one formula.

You don't need to understand the math. The key things to know:

Each threat type has a weight (a multiplier) — higher weight = bigger impact on the score
Phishing (×10) affects the score more than counterfeits (×3)
Critical vulnerabilities (×8) affect the score more than low-severity ones (×0.5)

Default Formulas

The system creates default formulas automatically:

Module	What It Calculates
ASM Score	Vulnerability severity + exposed ports + subdomains + threat score
BP Score	Active threats by type (phishing, dark web, etc.) × takedown dampener
Detection Score	Severity counts × resolution rate factor + threat score

Editing a Formula

Click a formula row to open the Formula Editor where you can:

View the full expression
Edit the expression (changes the calculation)
Test the formula with sample data
Save changes

Warning: Changing a formula affects how the score is calculated for all future scoring runs. Only make changes if you understand the impact.

When Would You Change a Formula?

A customer wants a specific threat type to have more or less weight
A customer wants to add or remove a variable from the calculation
The default formula doesn't match the customer's risk priorities

Example: If a customer cares more about dark web exposure than phishing, you could increase the dark web weight from ×8 to ×12 and decrease phishing from ×10 to ×6.