[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:vulnerability-management":3},{"control":4,"products":24,"stories":65,"lessons":109,"related":134,"compare":147},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":23},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.","Continuous scanning of servers, endpoints, cloud and applications for known vulnerabilities, ranked by whether they are exploited in the wild and how exposed each system is.","Thousands of vulnerabilities are published every month, but only a small share are ever exploited. Prioritising by real exploitation, for example CISA's Known Exploited Vulnerabilities list, puts scarce patching time on the flaws attackers actually use, and gives management a clear picture of exposure.",[11,12,13,14],"Does it prioritise by active exploitation and exposure, not only by CVSS score?","Does it cover cloud, containers and network appliances as well as servers?","Can it track time to fix per team against our targets?","How does it find assets we did not know we had?","Risk: known, exploited vulnerabilities stay open on exposed systems. Control: continuous scanning with exploitation-based priorities and fix deadlines. Owner: vulnerability management lead. Measure: time to fix known-exploited vulnerabilities.",[17,18,19,20],"NIS2 Art. 21(2)(e): vulnerability handling and disclosure","DORA Art. 25: vulnerability assessments and scans","CIS Control 7: continuous vulnerability management","ISO\u002FIEC 27001:2022 A.8.8: management of technical vulnerabilities",{"name":22,"slug":5},"Vulnerability Management","2026-10-16T12:48:06.88634+00:00",[25,33,41,49,57],{"vendor_slug":26,"vendor_name":27,"vendor_logo":28,"product_slug":29,"product_name":30,"url":31,"description":32},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":34,"vendor_name":35,"vendor_logo":36,"product_slug":37,"product_name":38,"url":39,"description":40},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":42,"vendor_name":43,"vendor_logo":44,"product_slug":45,"product_name":46,"url":47,"description":48},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":54,"url":55,"description":56},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"total":66,"last_days":67,"recent":68},2893,1374,[69,74,79,84,89,94,99,104],{"slug":70,"title":71,"published_at":72,"brief":73},"researchers-continue-to-find-serious-vulnerabilities-in-internet-connected-refri-04d35e","Researchers continue to find serious vulnerabilities in internet connected refrigerators","2026-11-13T21:20:51+00:00","14 vulnerabilities in Dixell refrigeration units grant root access, with some under active exploitation.",{"slug":75,"title":76,"published_at":77,"brief":78},"this-year-s-bug-count-just-passed-100k-9b8800","This year’s bug count just passed 100K","2026-11-13T20:52:17+00:00","The number of disclosed software vulnerabilities in 2026 has surpassed 100,000, more than double last year's total.",{"slug":80,"title":81,"published_at":82,"brief":83},"the-green-agent-pov-formulating-the-fix-for-an-internet-facing-container-with-se-43a4d5","The Green Agent POV: Formulating the Fix for an Internet-Facing Container with Sensitive Data Access","2026-11-13T17:05:02+00:00","Green Agent tool identifies and formulates fixes for internet-facing containers with vulnerabilities and sensitive data",{"slug":85,"title":86,"published_at":87,"brief":88},"postgresql-patches-52-flaws-including-22-year-old-bug-enabling-authenticated-rce-d8cc21","PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE","2026-11-13T16:53:08+00:00","PostgreSQL patches 52 flaws, including a 22-year-old bug enabling authenticated RCE.",{"slug":90,"title":91,"published_at":92,"brief":93},"november-patch-tuesday-how-to-sort-through-the-patches-dacc34","November Patch Tuesday: How to Sort Through the Patches","2026-11-13T15:23:43+00:00","Microsoft's November Patch Tuesday addresses 1,252 CVEs, highlighting the need for strategic patching over a blanket",{"slug":95,"title":96,"published_at":97,"brief":98},"artex-attackers-adopted-this-ai-pentesting-tool-in-three-months-leaked-secrets-a-8d732f","ARTEX: Attackers Adopted This AI Pentesting Tool in Three Months. Leaked Secrets Are Its Fastest Way In.","2026-11-13T15:22:30+00:00","Attackers are using the AI pentesting tool ARTEX, with leaked secrets providing the fastest entry.",{"slug":100,"title":101,"published_at":102,"brief":103},"hackers-use-2-700-passwords-to-break-into-microsoft-sql-servers-and-deploy-remot-8fab91","Hackers Use 2,700 Passwords to Break Into Microsoft SQL Servers and Deploy Remote Access Malware","2026-11-13T14:54:56+00:00","Hackers exploit weak passwords to compromise Microsoft SQL Servers, deploying malware for crypto mining and remote",{"slug":105,"title":106,"published_at":107,"brief":108},"citrix-patches-28-security-vulnerabilities-in-netscaler-including-a-critical-fla-fabc8a","Citrix Patches 28 Security Vulnerabilities in NetScaler, Including a Critical Flaw in Default Installations","2026-11-13T14:18:29+00:00","Citrix patches 28 NetScaler flaws including critical memory overflow affecting all default installations",[110,114,118,122,126,130],{"slug":111,"title":112,"published_at":113},"internet-connected-refrigeration-units-expose-critical-infrastructure-to-root-level-attacks","Internet-Connected Refrigeration Units Expose Critical Infrastructure to Root-Level Attacks","2026-11-13T22:21:16.893+00:00",{"slug":115,"title":116,"published_at":117},"actively-exploited-vulnerabilities-added-to-cisa-kev-catalog-demand-immediate-remediation","Actively Exploited Vulnerabilities Added to CISA KEV Catalog Demand Immediate Remediation","2026-11-13T21:21:21.381+00:00",{"slug":119,"title":120,"published_at":121},"cve-volume-hits-100k-ai-driven-discovery-outpaces-human-patching-capacity","CVE Volume Hits 100K: AI-Driven Discovery Outpaces Human Patching Capacity","2026-11-13T21:20:43.015+00:00",{"slug":123,"title":124,"published_at":125},"internet-facing-containers-with-sensitive-data-access-create-exploitable-attack-paths","Internet-Facing Containers with Sensitive Data Access Create Exploitable Attack Paths","2026-11-13T18:21:17.032+00:00",{"slug":127,"title":128,"published_at":129},"leaked-secrets-and-a-backdoored-ai-tool-give-attackers-cloud-access-in-minutes","Leaked Secrets and a Backdoored AI Tool Give Attackers Cloud Access in Minutes","2026-11-13T16:21:03.622+00:00",{"slug":131,"title":132,"published_at":133},"1252-cves-in-one-month-why-blind-patching-is-as-dangerous-as-not-patching","1,252 CVEs in One Month: Why Blind Patching Is as Dangerous as Not Patching","2026-11-13T16:20:44.156+00:00",[135,139,143],{"slug":136,"name":137,"problem":138},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",{"slug":140,"name":141,"problem":142},"penetration-testing","Penetration testing and bug bounty","Someone friendly finds the holes before someone hostile does.",{"slug":144,"name":145,"problem":146},"breach-attack-simulation","Breach and attack simulation","You only find out whether your security tools stop an attack when a real attacker tries.",{"tenable\u002Ftenable-vulnerability-management":148,"qualys\u002Fvmdr":163,"rapid7\u002Finsightvm":179,"holm-security\u002Fholm-security-platform":192,"axonius\u002Faxonius-exposures":200},{"hq_country":149,"also_provides":150,"reviews":151,"affected":161,"reported":162},"US",[],[152,155,158],{"label":153,"url":154},"PeerSpot: Tenable Vulnerability Management user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Ftenable-vulnerability-management-reviews",{"label":156,"url":157},"Gartner Peer Insights: Tenable Vulnerability Management user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Ftenable-vulnerability-management",{"label":159,"url":160},"PeerSpot: Tenable OT Security user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Ftenable-ot-security-reviews",0,4,{"hq_country":149,"also_provides":164,"reviews":165,"affected":161,"reported":178},[],[166,169,172,175],{"label":167,"url":168},"MITRE ATT&CK Evaluations Enterprise 2024 (ER6): Qualys endpoint results","https:\u002F\u002Fevals.mitre.org\u002Fresults\u002Fenterprise\u002F?vendor=qualys&scenario=2&evaluation=er6&view=individualParticipant",{"label":170,"url":171},"PeerSpot: Qualys Exposure Management user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fqualys-exposure-management-reviews",{"label":173,"url":174},"Gartner Peer Insights: Qualys VMDR user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fqualys-vmdr",{"label":176,"url":177},"PeerSpot: Qualys TruRisk Eliminate user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fqualys-trurisk-eliminate-reviews",13,{"hq_country":149,"also_provides":180,"reviews":181,"affected":161,"reported":191},[],[182,185,188],{"label":183,"url":184},"Gartner Peer Insights: InsightVM user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Finsightvm",{"label":186,"url":187},"PeerSpot: Rapid7 InsightVM user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Frapid7-insightvm-reviews",{"label":189,"url":190},"PeerSpot: Rapid7 MDR user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Frapid7-mdr-reviews",14,{"hq_country":193,"also_provides":194,"reviews":196,"affected":161,"reported":161},"SE",[195],{"slug":136,"name":137},[197],{"label":198,"url":199},"Gartner Peer Insights: Holm Security Next-Gen Vulnerability Management user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fholm-security-next-gen-vulnerability-management",{"hq_country":149,"also_provides":201,"reviews":202,"affected":161,"reported":161},[],[203,206],{"label":204,"url":205},"PeerSpot: Axonius user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Faxonius-reviews",{"label":207,"url":208},"Gartner Peer Insights: Axonius Asset Cloud user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Faxonius-asset-cloud"]