> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kikimora.io/llms.txt
> Use this file to discover all available pages before exploring further.
# Understanding the charts
> Interpret the CVE Frequency matrix, the Kikimora Score vs CVSS scatter plot, and the portfolio composition widget, and filter each one.
Risk management includes three visualizations that show how vulnerabilities are distributed, where contextual scoring disagrees with CVSS, and what your total risk burden looks like.
## CVE Frequency matrix
The matrix plots findings by CVE score severity against how often they occur across asset instances. Bubble size represents the total number of affected assets.
The four quadrants tell you what to do with each group:
| Quadrant | Meaning |
| :-------------------------------------- | :----------------------------------- |
| **Widespread + Critical (Patch First)** | High severity, many affected assets. |
| **Rare + Critical (Targeted Fix)** | High severity, few affected assets. |
| **Widespread + Lower Risk (Schedule)** | Lower severity, broad asset impact. |
| **Rare + Lower Risk (Backlog)** | Lower severity, low asset impact. |
You can filter the matrix by score band: Critical (80–100), High (60–79), or Medium (below 60).
## Kikimora Score vs CVSS
This scatter plot compares static CVSS severity against contextual Kikimora Scores to expose findings that generic scoring got wrong. Three categories:
* **Under-prioritized** — CVSS missed or understated the risk, but the Kikimora Score caught high environmental impact.
* **Over-prioritized** — a high CVSS score corrected downward because the asset has low exposure or existing mitigations.
* **Algorithms on par** — the Kikimora Score and the normalized CVSS score agree within ±10 points.
## Portfolio composition and risk reduction
This widget shows aggregate portfolio risk points, the impact of the fixes you have selected, and the total risk reduction percentage those fixes would achieve.
## Work through the charts
1. Review the chart overview to see CVE Frequency and Kikimora Score vs CVSS side by side.
2. Filter the CVE Frequency matrix to a score band, such as Critical (80–100), to narrow the plot to your highest-severity findings.
3. Filter the scatter plot to **Under-prioritized** to isolate findings where contextual risk exceeds the standard CVSS score.
