Edgepick
Which firewall / VPN line will cost you the fewest 2 a.m. emergency patches? Pick the platforms you're choosing between, enter sites, prices and your hourly rate. Edgepick reads CISA's live Known Exploited Vulnerabilities catalog and NVD, counts each platform's emergency patch events, grades the track record, prices the labour across your estate and ranks the 3-year cost — with the evidence for your client or their insurer.
How the maths works
- Each platform's KEV entries are matched by vendor + product line; entries added within 14 days are one emergency patch event.
- Events per year over your window → grade A (none) … E (2+/yr), one grade worse if any entry has known ransomware use.
- Patch labour/yr = events/yr × sites × hours × rate. TCO = sites × hardware + sites × licence × years + labour × years.
- Plus: CISA's median remediation window, share of KEVs in VPN/management components, NVD critical CVEs in the last 120 days.