SLA & MTTR Management
What it is
SLA and MTTR (Mean Time To Remediate) management tracks whether vulnerabilities are being fixed within organization-defined timeframes. It connects risk scores to operational accountability.
Highlights
- Configurable targets — organizations define expected remediation hours per severity level (Critical, High, Medium, Low).
- Breach detection — automatically identifies vulnerabilities that have exceeded their remediation deadline.
- Severity bucketing — Critical (CVSS ≥ 9), High (≥ 7), Medium (≥ 4), Low (below 4).
- Tagged asset reporting — SLA reports can be filtered by asset tags for team-specific accountability.
- Scheduled summaries — daily breach checks, weekly and monthly SLA rollups.
Key concepts
| Term | Meaning |
|---|---|
| MTTR (Given) | Target remediation time set by the organization |
| MTTR (Actual) | Actual remediation time used for breach detection |
| SLA Breach | A vulnerability remains open past its remediation deadline |
Why it matters
Risk scores tell you what to fix first. SLA tracking tells you whether your team is fixing things on time.
In the application
- Settings → SLA — configure remediation deadlines per severity
- Dashboard — MTTR widget and SLA Performance History chart
- Alerts & Notifications — SLA breach and summary alerts