CVSS vs. reality
How well do CVSS and EPSS thresholds separate the vulnerabilities that actually reach the KEV catalog? Coverage (how many caught), efficiency (how little waste) and effort (how many patches).
Coverage vs. efficiency
One point per rule/threshold. Top right is better: high coverage at high efficiency.
Data table
Effort per rule
Number of selected candidates (vulnerabilities to patch) per rule.