A pentest is a snapshot, and risk doesn't pause once it's delivered. The Exposure Clock shows exactly how many vulnerabilities, including externally exploitable ones, have surfaced since your last assessment.