N-Day

An N-day vulnerability is a known vulnerability for which a patch has been released but organizations have not yet applied. The "N" refers to the number of days since the patch was made available. N-days are responsible for the majority of successful cyberattacks, as attackers reverse-engineer patches to create exploits and target slow-to-patch organizations. Reducing the mean time to patch (MTTP) is one of the most impactful security improvements most organizations can make.

Why it matters for your website

• 1Helps identify vulnerabilities before attackers do
• 2Required by PCI-DSS, SOC 2, and most enterprise security programs
• 3Regular testing reduces mean time to detect (MTTD) breaches