alirezaaminzadeh/pentestbrief-severity-engine

PentestBrief Severity Engine

TF-IDF + XGBoost multi-class severity classifier for penetration test finding descriptions.

Intended Use

• Classify vulnerability severity (Critical/High/Medium/Low/Informational) from finding text
• Used within the PentestBrief multi-agent pipeline
• Not for autonomous exploitation or offensive security operations

Training Data

• ayshajavd/code-security-vulnerability-dataset
• Synthetic pentest finding corpus

Reference Model

• CIRCL/vulnerability-severity-classification-roberta-base

Limitations

• English-language findings perform best
• Requires structured finding text (title + description)
• Does not replace human pentest analyst review

Built by Aria AI Red Team Engineering.