Hadrian Unveils Exposure Clock Tool Amid Rising Vulnerability Risks

Hadrian launched the Exposure Clock, a tool that quantifies vulnerabilities disclosed since an organization's last penetration test. The tool highlights that the number of CVEs disclosed in the first half of 2026 is 50% larger than in 2025, with the average time to exploitation decreasing from months to days. Over 50% of organizations conduct penetration tests twice a year or less, creating significant exposure windows for threat actors. The Exposure Clock allows security teams to visualize the growing threat landscape and adjust their exposure management strategies accordingly. It counts publicly disclosed vulnerabilities and indicates how many are being exploited in the wild, focusing on remotely exploitable vulnerabilities. This tool reflects a shift towards continuous validation of external exposure rather than fixed testing schedules. Hadrian will showcase this tool at Black Hat USA.

Key Points: • Hadrian's Exposure Clock tracks vulnerabilities disclosed since the last pentest. • CVE disclosures in H1 2026 are 50% higher than in 2025, with faster exploitation times. • Over half of organizations conduct pentests infrequently, increasing exposure risks.