Vulnerability management
Vulnerability management is the routine that finds weak software and settings before an attacker does. Our team scans servers, workstations, network devices and cloud systems, ranks what it finds by real risk, and tracks each fix until it is closed.
What we do
- Scheduled internal and external vulnerability scans
- Authenticated scans for accurate Windows, Linux and network results
- Risk-based ranking that puts exploited vulnerabilities first
- Patch and mitigation tracking with owners and due dates
- Re-scans that prove each fix
- Exception handling with an owner and an expiry date
- Reports for auditors, insurers and boards
- Scan results sent to the SIEM and ticketing tools
We have worked with Tenable Nessus and Tenable One, Qualys VMDR, Rapid7 InsightVM and Microsoft Defender Vulnerability Management. The tool matters less than the process: authenticated scans, an agreed patch window, exceptions with an owner and a date, and a re-scan that proves the fix.
This work supports our Cybersecurity and Managed IT services. Findings go to the people who patch, and the same data feeds the evidence an auditor or insurer asks for. Product names are experience, not partnerships.
Platforms and practices
- Tenable Nessus
- Tenable One
- Qualys VMDR
- Rapid7 InsightVM
- Microsoft Defender Vulnerability Management
- Authenticated and agent-based scanning
- Risk-based prioritization (known exploited vulnerabilities)
- Remediation tracking and re-scan
- CIS and STIG baseline assessment
References
- Tenable: Nessus vulnerability assessment (vendor page)
- Qualys: Vulnerability Management, Detection and Response (VMDR) (vendor page)
- Rapid7: InsightVM (vendor page)
- Microsoft Learn: Microsoft Defender Vulnerability Management
Sources last checked .
Product names are trademarks of their owners and are listed to describe our experience; they do not imply endorsement or partnership.
How we use Vulnerability management for clients
Cybersecurity
We find out whether everything you run is safe from attackers, then we fix it.
Learn moreManaged IT Services
We run your IT day to day so it stays secure: help desk, devices, Microsoft 365, Exchange, Active Directory, backups, networks and monitoring.
Learn moreClayton Secure
One view of your entire cybersecurity program, in near real time.
Learn more