Key Performance Indicators (KPI)
Definitions for key performance indicators and other metrics used in the customer portal.
Block Rate
- The percentage over the last 30 days of the number of detections blocked in relation to the number of detections that resulted in an alert.
Noise Reduction
- The percentage of detections over the last 30 days that have been filtered out and do not merit alerting (For example, certain low severity detections). This shows the effectiveness of ActZero’s AI/ML pipeline & SOC.
MTTFR(Critical)
- The average time over the last 30 days from when a critical severity detection is discovered until the ActZero SOC initiates a response (Note: This is a global metric across all ActZero customers).
Ransomware Defense
- Percentage of the controls from the ‘Blueprint for Ransomware Defense’ framework currently implemented.
Arrival Rate
- Refers to the frequency at which new vulnerabilities are discovered or reported in your infrastructure. A higher rate may indicate increasing threats. Monitoring this rate helps in assessing the security posture and the effectiveness of detection tools.
Burn Rate
- Measures the speed at which identified vulnerabilities are addressed or mitigated within your infrastructure. It reflects the effectiveness of the remediation processes.
Escape Rate
- Refers to the percentage of previously resolved vulnerabilities that reappear in the latest scan. This metric highlights the effectiveness of past fixes and the need for better security practices.
Troubleshooting
-
For technical issues, and anything else not covered by this FAQ please get in touch with support.
-
For security questions and concerns please email our SOC.
Was this documentation helpful? Please send us your feedback!