Metrics for Vulnerability Response
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2 hours ago
I'd like to be able to deep dive into how long a vulnerable item has been in an open state before being closed. Vulnerable items from Tenable tend to reopen (along with another manually created integration we have), so I can't always go off the first found to last found, or last opened to close date.
So what I'm asking, is how would I set up a metric to calculate the time between open and close so that in the example below, I would see that the vulnerability was open for a total of 92 days and an average of 30.67 days before remediation. Conversely, has anyone done this where it's calculated on the First Seen and Last seen from the detection (so that we aren't waiting out the "Stale" period)?
| Open | Close | Total Open | Average | Total |
| 8/15/2025 | 10/21/2025 | 67 | ||
| 10/29/2025 | 11/15/2025 | 17 | 30.67 | 92 |
| 12/1/2025 | 12/9/2025 | 8 |