Root Evidence published the Vulnpocalypse Report, which included a strong critique of the ZeroDayClock and found fundamental issues with its definitions and data presentation.
Public source
Publisher name
Public post
A day after I published “The Vulnpocalypse Report,” which includes a strong critique of the ZeroDayClock (ZDC), it was retired. For background, when I first saw ZDC, I w…
Company
Root Evidence
- Industry
- Data Security Software Products
- Company size
- 11–50 employees
Latest activity
Latest activity from Root Evidence
11 signals
Research & Knowledge
Root Evidence published a chart measuring the median time between when software vendors issued a patch for a CVE and when VulnCheck KEV first saw exploitation in the wild.
Research & Knowledge
Root Evidence published a new Vulnpocalypse Report examining thousands of vulnerabilities exploited in the real world and measuring adversary behavior since AI arrived.
Research & Knowledge
Root Evidence published the Vulnpocalypse Report detailing the zero days landscape, including WordPress plugins accounting for 29% of all zero days since 2018.
Discover more
Similar signals
Similar public activity from other companies.
Research & Knowledge
Empirical Security
Empirical Security reported that of the 51,219 CVEs published in 2026 that NVD has settled, 20,076 are marked as Deferred.
Research & Knowledge
Nucleus Security
Nucleus Security published a cybersecurity report citing a stat from CyberScoop's original reporting that CISA analyzed at one large agency found only 1% of vulnerabilities fell into the 3-day window.
Research & Knowledge
Barracuda
Barracuda published findings from its latest application security research indicating that the average web application contains 20 vulnerabilities linked to preventable security oversights.
Research & Knowledge
Cyderes
Cyderes published a breakdown of four zero days hitting CrowdStrike, NVIDIA, Avast, and Kaspersky.
Research & Knowledge
Eclypsium, Inc.