Abstract: Systems and methods are disclosed for determining a secured system security risk score. One method comprises receiving, on an electronic network, security data corresponding to a security vulnerability of each of a plurality of servers, each of the plurality of servers being associated with a secured system. A server security risk score may be determined for each of the plurality of servers, based on the security data corresponding to the security risks for each of the plurality of servers. The server security risk score may be modified, for each of the plurality of servers, based on a time elapsed since a discovery of each security vulnerability or hosting environment influence. A secured system security risk score may be determined, associated with the secured system, based on the mitigated server security risk score for each of the plurality of servers.