Threat & Vulnerability Mgmt · Foundational
Vulnerability Management
Scans, prioritizes, and tracks vulnerability remediation.
8 options listedTypical cost: $2k-$100k/yrIDENTIFY (ID)
Overview
VM tools scan assets for known vulnerabilities, prioritize by exploitability and exposure, and track remediation SLAs. They are a foundational, often compliance-mandated control. Priced per asset/IP scanned. Risk-based prioritization is the key modern differentiator over raw CVSS.
Knowing and closing exposures is foundational and often mandated.
Advantages
- Tenable/Qualys/Rapid7 mature
- OpenVAS free
- foundational and frequently compliance-required
- risk-based prioritization (e.g., Tenable VPR).
Trade-offs
- Scan noise and CVSS overload
- per-asset cost
- remediation (not scanning) is the hard part
- credential/coverage gaps.
Vendors & tools in this area
CrowdStrike Falcon Exposure ManagementCommercial
Agent-based, scan-less vulnerability management built into the Falcon platform.
Visit site →IntruderCommercial
Cloud-native vulnerability scanning built for lean teams without a dedicated security function.
Visit site →