|
Vulnerability scanning tools have become a staple for most organizations ongoing security management program. Vulnerability Management technology has matured dramatically in recent years in terms of accuracy, speed and safety. A wide variety of tools are not available to scan various targets within the infrastructure, including network notes, application interfaces, databases, source code, wireless networks, and more. Today there is a growing greater emphasis on how to prioritize the multitude of results that emerge from such tools, based on risk and compliance, and to maintain a consistent order in which vulnerabilities are addressed. Additionally, organizations look to track where remediation is being performed, the progress of such remediation efforts, and where exceptions are granted.
While some of the more mature vulnerability scanning tools provide limited remediation tracking abilities within their suites, their limited capabilities fall short of the tracking and prioritization needs for most large organizations. Additionally, most organizations employ multiple scanners (networks, application, database, source code, etc), but lack a central tool for tracking and managing remediation across these disparate sources.
|
|
|
