Where the LLM Stops: Deterministic Scoring in an AI-Assisted VAPT Pipeline

Every VAPT report ends the same way: a handful of numbers. A CVSS score. A severity label. A priority rank. Sometimes an aggregate risk score. Those are the numbers a remediation team actually acts on