Embodiments of the disclosure are related to a method, apparatus, and system for generating scores for the security threat coverage in a client network based on collected network environment data, comprising: determining a client device list; creating a client-specific threat matrix based on the client device list and a general threat matrix; and determining one or more security threat coverage scores for the client network based on the client-specific threat matrix.