Per-employee risk score and alert prioritization

[WhiteMuush]

Why

A tool that surfaces hundreds of unranked alerts creates noise, not security. Buyers expect prioritization that distinguishes a stale old-password dump from a recent, active credential on a matching corporate domain.

Scope

• Per-employee risk score from: recency of exposure, artifact type (session cookie/token > plaintext password > hash), domain match, breach severity, and unresolved-alert count.
• Sort/filter alerts by computed risk; expose score as a dashboard widget and a report column.
• Configurable weighting per company.

Hooks

• src/lib/reports/exposure.ts, src/lib/reports/findings.ts, Alert/Employee models, dashboard widgets.