> ## Content Index
> Fetch the complete content index at: https://cje.io/llms.txt
> Use this file to discover other available public pages before exploring further.

# Fixing everything is a fool's errand
- URL: https://cje.io/2026/09/24/fixing-everything-is-a-fools-errand/
- Published: 2026-09-24T16:00:00.000Z
- Updated: 2026-09-24T15:59:59.000Z
- Author: Casey Ellis
- Tags: Hot Takes

Vulnerability management is a bit of a fool's errand if your goal is to make sure that everything's fixed. We're not going to get around to all of it. There's too much.

We've got to actually think about what our threat model is. What are we trying to prevent? What kind of attackers are we expecting, and what's their level of economically rational motivation to do the thing? Reverse out the things that are most important, make sure you're not missing that stuff if it comes in on the queue, and work backwards from that, instead of trying to eat the whole elephant and figure out which part was best.

*From my conversation with Ashish Rajan on the [AI Security Podcast](https://youtu.be/G7a1ZtpuArA?t=1043&ref=cje.io).*