Threat exposure validation