Severity & confidence

Severity describes potential impact; confidence describes how sure the signal is. We keep them separate on purpose.

Severity

low, medium, high, critical — what happens if this is a true positive and we let it through.

Confidence

0–100 — corroboration across payload, behaviour and reputation.

How they combine

Blocking needs high severity and high confidence; a high-severity, low-confidence hit is enriched and escalated, never silently blocked.

Documentation in progress. This page is scaffolded as part of the Ilmexus knowledge base; full operational detail is being written. For specifics today, talk to us or email info@ilmexus.com.