Vulnerability Risk Scorer

It means the vulnerability can be exploited remotely over a network, including the internet, without any physical or local access to the affected system — this is the highest-risk category because it dramatically increases the pool of potential attackers.

Generally yes, but context matters — a Critical finding on an isolated test server is lower real-world risk than a High finding on an internet-facing production system. A professional penetration test prioritises findings by actual business impact, not score alone.

This tool scores a single vulnerability you already know about. A penetration test actively discovers unknown vulnerabilities across your environment, then scores, chains, and demonstrates their real-world exploitability.