Cybersecurity vulnerability classification and remediation based on installation base

A non-transitory computer readable medium that stores instructions for remediating a cyberattack risk in a computing resource located at a node in a computer network having a plurality of nodes comprising machine executable code which when executed by at least one computing device, causes the at least one computing device to perform steps comprising:

• receiving vulnerability score data that includes a severity level for a vulnerability in the computing resource at said node;
• receiving a number of installations value (NcRi) that indicates a number of instances the computing resource is included in the plurality of nodes;
• determining a percentile of occurrence value (POrni) for the computing resource based on the number of installations value (Nrni);
• generating a weighted vulnerability classification summary matrix having rows identifying computer resources, having a column indicating a severity level for each identified computer resource, and having a column indicating a true severity level for each identified computer resource;
• applying a severity adjustment matrix to the severity level to determine the true severity level for the vulnerability in the computing resource in the weighted vulnerability classification summary matrix, wherein the severity adjustment matrix has columns indicating ranges of percentiles of occurrence, and has rows indicating severity ratings, and wherein the true severity level for each identified computer resource in the weighted vulnerability classification summary matrix is determined by the corresponding range of percentile and the severity rating of the respective identified computer resource;
• reprioritizing the vulnerability in the computing resource based on the true severity level;
• and
• mitigating the cyberattack risk for the computing resource based on the true severity level.