2022 SC Awards Finalists: Best Vulnerability Management Solution

SynerComm created CASM Managed Vulnerability Scanning (MVS) with the goal of being completely hands-off, while still providing multiple user-types with the most detailed and accurate attack surface reporting available today. A single solution that solves your asset inventory and monitoring, vulnerability management, attack surface management, and reporting needs. If and when needed, CASM has a dashboard for researching and validating systems through the hundreds of security attributes for every asset. CASM MVS can be enhanced/paired with our human-led continuous penetration testing to provide complete assessment plus pentest coverage.

CrowdStrike Falcon Spotlight is a complete vulnerability management solution that provides visibility and coverage across all major OS platforms (Windows, Linux, macOS and other applications). Falcon Spotlight’s scanless, agent-based approach to vulnerability assessment allows customers to extend their vulnerability management program to parts of their environment, such as their remote workforces and cloud workloads, that are difficult or impossible to manage with legacy scanning solutions.

InsightVM provides visibility into the vulnerabilities in a modern IT environment—including local, remote, cloud, containerized, and virtual infrastructure—as well as clarity into how those vulnerabilities translate into business risk and which are most likely to be targeted by attackers. Key features include full network scans and elimination of vulnerabilities.

Qualys Vulnerability Management Detection and Response (VMDR) enables organizations to automatically discover assets in their environment – unmanaged assets appearing on network, inventory all hardware/software, classify and tag critical assets – all from a single app unified. VMDR continuously assesses assets for the latest vulnerabilities and applies the latest threat intel analysis to prioritize actively exploitable vulnerabilities, while also automatically detecting the superseding patch and deploying it for remediation.

Randori empowers vulnerability management teams to assess not just the severity of the vulnerability but the likelihood it will be compromised, unlocking both sides of the risk equation for the first time. Grounded in decades of experience and backed results from thousands of attacks, Randori’s Target Temptation model provides a realistic assessment of a target’s likelihood to be attacked. Used internally by the Randori team to prioritize research and attack activities — it is not a theoretical model, but rather one backed by results and put into action.