Audience
IT security teams in search of a solution to improve all their network operations and increase security
About Cisco Vulnerability Management
A tidal wave of vulnerabilities, but you can’t fix them all. Rely on extensive threat intel and patented prioritization to cut costs, save time, and keep your teams efficiently focused on reducing the biggest risks to your business. This is Modern Risk-Based Vulnerability Management. We created Risk-Based Vulnerability Management software and now we’re defining the modern model. Show your security and IT teams which infrastructure vulnerabilities they should remediate, when. Our latest version reveals exploitability can be measured, and accurately measuring exploitability can help you minimize it. Cisco Vulnerability Management (formerly Kenna.VM) combines real-world threat and exploit intelligence and advanced data science to determine which vulnerabilities pose the highest risk and which you can deprioritize. Spoiler alert: Your mega-list of “critical vulnerabilities” will shrink faster than a woolen sweater-vest in a hot cycle.
Other Popular Alternatives & Related Software
Saner CVEM
SecPod Saner CVEM is a continuous vulnerability and exposure management platform designed to help organizations discover, prioritize, and remediate risks before attackers can exploit them. The platform unifies asset discovery, vulnerability detection, compliance management, endpoint management, posture anomaly detection, patch management, exposure visibility, and risk prioritization in one workflow. Saner CVEM uses AI-powered asset visibility, machine-learning anomaly detection, and intelligent prioritization to identify both known vulnerabilities and exposure gaps that traditional scanners may miss. It evaluates risk using factors such as EPSS, CISA KEV status, SSVC, asset criticality, business context, MITRE ATT&CK mapping, and CWE mapping. The platform also supports integrated patch deployment, posture improvement, compliance automation, and continuous scanning across Windows, Linux, macOS, AIX, servers, endpoints, and third-party applications.
Learn more about Saner CVEM
Invicti Web + API
Invicti Web + API, formerly Acunetix, is a dynamic application security testing (DAST) platform for identifying and validating vulnerabilities across web applications, APIs, and other runtime assets. The platform automatically discovers applications, APIs, shadow assets, unlinked pages, and undocumented endpoints while supporting modern JavaScript applications and authenticated workflows. Its scanning engine detects more than 7,000 types of security issues, including vulnerabilities covered by the OWASP Top 10 and OWASP API Top 10 as well as business logic flaws. Invicti combines AI-driven risk scoring with runtime reachability, exploitability, and business context to help security teams prioritize vulnerabilities that represent demonstrable risk.
Learn more about Invicti Web + API
KernelCare Enterprise
Global organizations trust TuxCare for live patching their critical Linux hosts and OT devices across their hybrid multi-cloud environments. No reboot is required to deploy and enable the TuxCare KernelCare Enterprise solutions to live patch Linux kernels and critical system libraries, including OpenSSL and Glibc. In contrast, all hosts and devices maintain the current production level uptime while receiving all security updates.
TuxCare automates the patching process and eliminates the need to wait weeks or months for reboot cycles to apply patches. TuxCare currently protects over 1 million workloads worldwide.
Tight integrations with popular patch management and vulnerability scanners, including Qualys, Crowdstrike, and Rapid7, enable TuxCare to fit seamlessly into existing infrastructure. The TuxCare secure patch server, ePortal, allows operations in gated and air-gapped environments.
Reduce risk by significantly reducing the mean time to patch vulnerabilities
Learn more about KernelCare Enterprise
Wiz
Wiz is a new approach to cloud security that finds the most critical risks and infiltration vectors with complete coverage across the full stack of multi-cloud environments. Find all lateral movement risks such as private keys used to access both development and production environments. Scan for vulnerable and unpatched operating systems, installed software, and code libraries in your workloads prioritized by risk. Get a complete and up-to-date inventory of all services and software in your cloud environments including the version and package. Identify all keys located on your workloads cross referenced with the privileges they have in your cloud environment. See which resources are publicly exposed to the internet based on a full analysis of your cloud network, even those behind multiple hops. Assess the configuration of cloud infrastructure, Kubernetes, and VM operating systems against your baselines and industry best practices.
Learn more about Wiz
Pricing
Free Version:
Free Version available.
Free Trial:
Free Trial available.
Integrations
Company Information
Cisco
Founded: 1984
United States
www.cisco.com/site/us/en/products/security/vulnerability-management/index.html
Videos and Screen Captures
Other Useful Business Software
Our Free Plans just got better! | Auth0
You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
Product Details
Platforms Supported
Cloud
Training
Documentation
Live Online
Webinars
In Person
Support
24/7 Live Support
Cisco Vulnerability Management Frequently Asked Questions
Q: What kinds of users and organization types does Cisco Vulnerability Management work with?
Cisco Vulnerability Management works with these users and organization types: Mid Size Business, Small Business, Enterprise, Freelance, Nonprofit, Government, and Startup.
Q: What languages does Cisco Vulnerability Management support in their product?
Cisco Vulnerability Management supports these languages: English.
Q: What kind of support options does Cisco Vulnerability Management offer?
Cisco Vulnerability Management offers support via 24/7 live support.
Q: What other applications or services does Cisco Vulnerability Management integrate with?
Cisco Vulnerability Management integrates with: AT&T Alien Labs Open Threat Exchange, Axonius, Bugcrowd, Contrast Assess, CyCognito, Eclypsium, Google Digital Risk Protection, NorthStar Navigator, Optiv Managed XDR, Pliant, Proficio, Qualys WAS, Snyk, Sonatype SBOM Manager, Swimlane, Seeker, Tenable One, and Veracode.
Q: What type of training does Cisco Vulnerability Management provide?
Cisco Vulnerability Management provides training in the form of documentation, live online, webinars, and in person.
Q: Does Cisco Vulnerability Management offer a free trial?
Yes, Cisco Vulnerability Management offers a free trial.
Cisco Vulnerability Management Product Features
IT Security
IP Protection
Supported
Vulnerability Scanning
Supported
Web Threat Management
Supported
Anti Spam
Not Supported
Anti Virus
Not Supported
Email Attachment Protection
Not Supported
Event Tracking
Not Supported
Internet Usage Monitoring
Not Supported
Intrusion Detection System
Not Supported
Spyware Removal
Not Supported
Two-Factor Authentication
Not Supported
Web Traffic Reporting
Not Supported
Patch Management
Alerts/Notifications
Supported
Network Wide Management
Supported
Patch Testing
Supported
Automatic Approval
Not Supported
Automatic Patch Deployment
Not Supported
Automatic Scans
Not Supported
Compliance Management
Not Supported
Custom Patches
Not Supported
Dashboard
Not Supported
Patch Prioritization
Not Supported
Remote Access/Control
Not Supported
Vulnerability Scanning
Not Supported
