PentestForge Severity Engine
TF-IDF char n-gram + XGBoost multiclass classifier for penetration test finding severity prediction.
Intended Use
- Prioritize findings extracted from pentest reports
- Complement CVSS scores with ML-based severity classification
- CPU-friendly inference for SOC/GRC workflows
Training Data
- Synthetic anonymized findings
- mamtakumar/seven-phishing-email-datasets (mapped to finding records)
Limitations
- Not a substitute for human pentester judgment
- Trained on English technical text; Persian reports may have reduced accuracy
- Demo model — retrain on your organization's finding taxonomy for production
Authors
Aria AI Red Team Engineering — aria-ai.ir
- Downloads last month
- -