AIVSS Calculator

Dynamic AI Vulnerability Assessment Tool

Dynamically Assess Your Agent's Risk Profile

Use the controls below to define your vulnerability scenario and the agent's capabilities. The AIVSS score will update in real-time, providing immediate feedback.

AIVSS Score

1.0

Low Risk

Maximum Score: 10.0

AARS

2.0

Agentic Risk

CVSS Base

0.0

Traditional Risk

CVSS v4.0 Base Metrics

Exploitability Metrics

These metrics describe the characteristics of the vulnerability that lead to a successful attack.

Attack Vector (AV)

The vulnerable component is bound to the network stack and the attacker's path is through OSI layer 3 (the network layer).

Attack Complexity (AC)

Specialized access conditions or extenuating circumstances do not exist. An attacker can expect repeatable success when attacking the vulnerable component.

Attack Requirements (AT)

The vulnerable component is in a state that is ready to be attacked.

Privileges Required (PR)

The attacker is unauthorized prior to attack, and therefore does not require any access to settings or files of the vulnerable system to carry out an attack.

User Interaction (UI)

The vulnerable system can be exploited without interaction from any human user.

Vulnerable System Impact Metrics

These metrics describe the direct impact of a successful exploit on the vulnerable component itself.

Confidentiality (VC)

There is a total loss of confidentiality, resulting in all information within the vulnerable component being divulged to the attacker.

Integrity (VI)

There is a total loss of integrity, or a complete loss of protection. The attacker is able to modify any/all files protected by the vulnerable component.

Availability (VA)

There is a total loss of availability, resulting in the attacker being able to fully deny access to resources in the vulnerable component.

Subsequent System Impact Metrics

These metrics describe the impact of a successful exploit on systems beyond the vulnerable component.

Confidentiality (SC)

There is no loss of confidentiality within the subsequent system.

Integrity (SI)

There is no loss of integrity within the subsequent system.

Availability (SA)

There is no impact to availability within the subsequent system.

AARS Factors Assessment

Rate each factor based on the agent's capabilities: None (0.0), Partial (0.5), or Full (1.0)

Autonomy of Action

The agent's ability to operate and execute tasks without direct, real-time human command or intervention.

Tool Use

The agent's capability to interact with and use external tools, such as APIs, file systems, or databases to affect its environment.

Memory Use

The use of persistent memory to store information from past interactions and use it to inform future actions and decisions.

Dynamic Identity

The agent's ability to dynamically assume different roles, permissions, or identities as needed to perform its tasks.

Multi-Agent Interactions

The agent's ability to communicate, coordinate, delegate tasks with, and be influenced by other autonomous agents.

Non-Determinism

The inherent unpredictability of the agent's behavior, where the same input does not always produce the exact same output.

Self-Modification

The agent's potential to alter its own underlying code, parameters, or core logic during its operation.

Goal-Driven Planning

The agent's capacity to receive a high-level objective and independently create and execute a multi-step plan to achieve it.

Contextual Awareness

The agent's sensitivity to its environment and its ability to alter its behavior based on external data or changes in context.

Opacity and Reflexivity

The 'black box' nature of the agent's internal reasoning, making it difficult for humans to fully understand why it made a particular decision.

Score Contribution

Risk Distribution

Traditional (CVSS)0.0%

Agentic (AARS)100.0%

No profiles saved yet.

AI Interpretation

Click "Get Insights" to receive an AI-powered interpretation

of your AIVSS assessment results

AIVSS Calculator

Dynamically Assess Your Agent's Risk Profile

CVSS 4.0 Metrics

CVSS v4.0 Base Metrics

Exploitability Metrics

Vulnerable System Impact Metrics

Subsequent System Impact Metrics

AARS Factors

AARS Factors Assessment

Visualizations

Score Contribution

Risk Distribution

Settings

Scenario Profiles

Vector Strings

AI Interpretation