Subtractive Security, LLC

Proposed standard for how exceptions need to be treated as temporary security debt and the debt handled via architectural constraints.

Proposed standard for how vulnerabilities and misconfigurations should be prioritized for remediation based the application of the Path Erasure Rate metric.