The Threat Index

The Threat Index is a single, honest thing: my editorial judgment of how tense the week feels for people who ship software, expressed on a scale of one hundred. It is set by hand, usually weekly. It is not a model, not a feed, and not a product. When it moves, it is because I moved it, and this page is where I say so.

Roughly: under 40 is Low, 40–59 is Guarded, 60–75 isElevated, and above 75 is Severe. A widely exploited zero-day in something everyone runs moves it up. A quiet patch cycle brings it back down.