A computer-implemented method comprising: receiving data that identifies an entity's computer assets, attributes for each of the entity's computer assets, and respective relevance ratings for each of the entity's computer assets; receiving threat data that identifies vulnerabilities of particular attributes, the threat data comprising two or more subsets of threat data each of which identifies a vulnerability of a different one of the particular attributes; determining, by analyzing the threat data, vulnerability trends for the particular attributes; determining, for each of the attributes, whether the attribute is one of the particular attributes identified in the threat data; updating, for each of the attributes that is one of the particular attributes identified in the threat data, the respective relevance ratings of the corresponding attribute using the vulnerability trends for the attribute; for each of two or more vulnerabilities identified in the threat data: determining the particular attributes affected by the vulnerability; and determining a score for the vulnerability using the respective relevance ratings for the particular attributes affected by the vulnerability; generating a ranking (120a-c) of the two or more vulnerabilities using the corresponding scores; generating instructions for presentation of a user interface that identifies each of the two or more vulnerabilities according to the ranking (120a-c); providing the instructions to a device to cause the device to present the user interface to a user to allow the user to change the entity's computer assets or the attributes of the entity's computer assets based on the vulnerabilities; and receiving an indication of a change to the entity's computer assets or the attributes of the entity's computer assets. receiving data that identifies an entity's computer assets, attributes for each of the entity's computer assets, and respective relevance ratings for each of the entity's computer assets; receiving threat data that identifies vulnerabilities of particular attributes, the threat data comprising two or more subsets of threat data each of which identifies a vulnerability of a different one of the particular attributes; determining, by analyzing the threat data, vulnerability trends for the particular attributes; determining, for each of the attributes, whether the attribute is one of the particular attributes identified in the threat data; updating, for each of the attributes that is one of the particular attributes identified in the threat data, the respective relevance ratings of the corresponding attribute using the vulnerability trends for the attribute; for each of two or more vulnerabilities identified in the threat data: determining the particular attributes affected by the vulnerability; and determining a score for the vulnerability using the respective relevance ratings for the particular attributes affected by the vulnerability; determining the particular attributes affected by the vulnerability; and determining a score for the vulnerability using the respective relevance ratings for the particular attributes affected by the vulnerability; generating a ranking (120a-c) of the two or more vulnerabilities using the corresponding scores; generating instructions for presentation of a user interface that identifies each of the two or more vulnerabilities according to the ranking (120a-c); providing the instructions to a device to cause the device to present the user interface to a user to allow the user to change the entity's computer assets or the attributes of the entity's computer assets based on the vulnerabilities; and receiving an indication of a change to the entity's computer assets or the attributes of the entity's computer assets.