OWASP Risk Assessment Calculator

Score the risk of a vulnerability following the OWASP Risk Rating Methodology . Tune the 16 factors (threat agent, vulnerability, technical and business impact) and instantly get the likelihood, impact and overall severity, with its radar chart. The vector is stored in the URL — copy the link to share or document the assessment.

Likelihood
Impact
Overall risk severity
Vector:
How is the risk severity calculated?

Each side (Likelihood and Impact) is the average of its 8 factors (0–9), classified as LOW/MEDIUM/HIGH. The overall severity comes from the matrix:

L: LOWL: MEDIUML: HIGH
I: HIGHMediumHighCritical
I: MEDIUMLowMediumHigh
I: LOWNoteLowMedium

Ranges: 0–<3 LOW · 3–<6 MEDIUM · 6–9 HIGH. Based on the OWASP Risk Rating Methodology.