Patch what attackers actually exploit

Patch what attackers actually exploit. A 6-page KEV + EPSS patch playbook and a workbook that looks up up to 2,000 of your CVEs in the bundled CISA KEV catalog and gives each a priority tier and due date.

• Playbook (PDF, 6 pages): Why KEV first, the numbers, where exploited CVEs come from, the four tiers with due dates, exceptions, a 30-minute weekly routine, 5 metrics to report
• Your CVEs: Paste up to 2,000 CVE IDs with asset, criticality and internet exposure; get In KEV, vendor/product, ransomware flag, EPSS, tier, due date, status
• Dashboard: Known-exploited count, ransomware-linked, overdue, open/overdue/fixed by tier, catalog facts
• Policy: Days per tier and the EPSS threshold
• KEV: The bundled CISA KEV catalog snapshot with FIRST EPSS scores (1,731 CVEs)

Works in Microsoft Excel (2010+), Google Sheets and LibreOffice. No macros or add-ons. Every file ships as an example copy (filled with made-up data) and a blank copy, plus a 2-page Quick Start PDF. Every formula is recalculated and checked against an independent calculation before release.

Why this one?

• Why not sort by CVSS? Severity isn't exploitation: many critical CVEs are never used, and some medium ones are in KEV.
• Why not just read the KEV feed? The playbook turns it into a written policy with due dates, exceptions and metrics your team can follow.

See every tab and real screenshots, plus a free preview: cybermax.cybermax-tools.workers.dev/store/kevscope-playbook

Licence: Team licence: one organisation, internal use. No reselling or sharing outside your organisation. Guidance, not a compliance standard. One-time purchase, instant download (zip). Questions: cybermax.tools@gmail.com. © 2026 CyberMax.