A New Approach to Proving Cybersecurity Value (That Isn’t ROI)

This post introduces HackerOne's Return on Mitigation (RoM) framework and calculator to quantify the financial impact of cybersecurity investments by estimating avoided losses; it explains the methodology (including an Exploitation Likelihood Score), tool availability (full and light versions), integration with HackerOne features (AI Copilot, CVSS/CVE/EPSS inputs), and invites feedback and participation via a white paper and webinar.