vulnerabilities, so the Lucky 13 are not necessarily comprehensive. The community is
encouraged to suggest additions.
Vulnerability Assessment Assurance Levels (VAAL)
David Litchfield originally proposed Vulnerability Assessment Assurance Levels