Attack surface metrics: divide by zero

[failys]

There should be sanity checking of inputs and on the server of attempts to divide by zero during attack surface metric calculations.