Product Security Hub Logo
The Blog

Product Security in the Real World

The gap between "we have a threat model" and "we're actually secure" is where most of this blog lives.

August 3, 2026

CVSS Scores Are Lying to You

CVSS scores describe how bad a vulnerability could be in theory. They say nothing about your product. Here's why context is everything in vulnerability triage.

Read post →