Administrators with the Manage application posture permission can tailor two things for the whole organization: how the Exposure score is calculated (Scoring settings) and where remediation work is sent (Remediation routing). Both buttons are at the top right of the Frontier AI Defense page; users without this permission do not see them.
Most organizations should start with the DataBee defaults and change them only for a clear business reason.
Scoring settings
Select Scoring settings. The window has two tabs: Severity weights and Business rules.
Severity weights
Severity weights set how much each severity level counts toward the score relative to the others.
Severity weights: adjust the balance between Critical, High, Medium, and Low.
- Enter a whole number from 0 to 30 for each severity. Only the balance between them matters — raising every number by the same amount changes nothing.
- Critical cannot weigh less than High, and at least one severity must carry some weight.
- The Scored as and Caps at columns show the effect of your changes before you save.
- The exploitation multipliers cannot be changed.
Important: once you change the weights, your scores are no longer directly comparable with DataBee benchmarks. Frontier AI Defense keeps the default score alongside, and a Custom scoring badge appears at the top of the page so everyone knows the scores have been tuned.
Business rules
Business rules add points to an application's score when something matters to your organization that the standard formula doesn't capture — for example, a device with no endpoint protection installed.
The Business rules tab lists each rule with its points and conditions. Select Add rule to create another.
To add a rule:
- Select Add rule.
- Give the rule a Name people will understand.
- Build the condition: choose what it applies to (Application, Device, or Finding), the field, the comparison, and the value. Select + Add condition to require more than one thing to be true.
- Choose how many points to add (1 to 10).
- Select Save rule.
Building a rule: choose the condition, such as a device's operating system being past end-of-life, and how many points to add.
Rules can only raise a score, never lower it. One rule can add at most 10 points, and all rules together at most 20. Each rule shows how many findings and applications it matches today, and you can switch a rule off without deleting it.
Applying your changes
Before you save, the What changes preview shows which applications' scores and rankings would move. Select Apply to re-score every application for the whole organization, or Reset to DataBee defaults to undo all tuning.
Remediation routing
Select Remediation routing to set the organization-wide defaults for where work goes and how it is sent. People sending work can still adjust grouping and channel for an individual dispatch.
Remediation routing sets who receives the work, how it is grouped, and how it is sent.
- Who receives the work:
- Remediation owners (default) — the CMDB assignment group that owns each device.
- Business owner — the owner declared on the application.
- Both — the CMDB group, falling back to the business owner when a device has no group.
- How work is grouped — one item per fix (default), per application, or per owner.
- How it goes out — ServiceNow incidents (default) or email, and whether to copy the business owner. Which ServiceNow connection to use is chosen each time work is sent.
We recommend keeping ServiceNow switched on. Email does not report anything back, so warnings such as Closed, still detected only work when there is a ticket to compare scan results against.
Select Apply to save, or Reset to defaults.