How the Space Risk Score Is Calculated
The Space Risk Score is a single 0-100 metric that summarizes the security risk for a space. Higher means more risk; 0 means no risk. It's the score that the risk reduction of each initiative directly improves.
Use it as a high-level benchmark to track your security posture over time. You find it in the Space Risk gauge on the space dashboard. When you view a workspace, the same gauge shows the Workspace Risk, calculated the same way over the workspace's assets.
The formula
The Space Risk Score is the average asset risk score across every asset in the space:
Space Risk Score = (sum of all asset risk scores) ÷ (total number of assets)
Where:
- Asset risk score is the 0-100 score Mondoo assigns each asset, rolled up from that asset's findings. See Asset and Space Risk Scores.
- Sum and total number cover every asset in the space.
Under the gauge, the dashboard shows how many findings and assets the score is calculated from (for example, "Calculated from 8,165 findings on your 295 assets"). The finding count is context: it tells you how much work sits behind the score. The score itself is the per-asset average above.
How exceptions are handled
Exceptions change an asset's risk score, which then flows into the space average. They never change the number of assets counted.
| Exception type | Effect on the score |
|---|---|
| Risk Accepted, False Positive, Workaround | The finding no longer counts toward its asset's risk score. |
| Disable | The check stops running and is excluded from its asset's score. |
Example
A space has 3 assets:
| Asset | Asset risk score | Notes |
|---|---|---|
| web-server-01 | 95 | |
| db-server-02 | 80 | |
| build-agent-03 | 0 | No findings affect its score |
Calculation:
- Sum:
95 + 80 + 0 = 175 - Space Risk Score:
175 ÷ 3 = 58.33