Vulnerability Management

Every regulatory and compliance framework requires frequent scanning followed by detailed reporting and remediation tasks. The challenge for managers, auditors and executives is to ensure the organizational security posture meets compliance requirements, contractual obligations and risk management standards. 

Vulnerability scanning is commoditized with only small differences between the results provided by different tools; but there are major differences in how the tools operate and how easily you can manage the remediation process. We offer Qualys-based vulnerability management tools that include fully-automatic threat detection for managed scans, DHCP support and multiple report options: Executive, Technical, Scorecard, Patch, Top20 and more. You can choose either a managed or self-service scanning option.

Our approach

We support the loading of Qualys self-service scan data through our GMSSP for enhanced Vulnerability and Threat Correlation (VTC) using the portal-based application programming interface (API) and graphical user interface (GUI) loader. VTC enables the security monitoring service to identify malicious activity that is either on-target or off-target with the known vulnerabilities of a monitored asset.

Criticality can be adjusted accordingly to identify severe threats or eliminate false positives. Traditional vulnerability management processes are time-consuming, inefficient and can focus on the wrong criteria, resulting in organization security and compliance program gaps. To see measurable results in vulnerability reduction, our Vulnerability Management Service, combined with threat intelligence and exploit tracking, focuses vulnerability management efforts on the highest-impact areas.