Audience
IT security teams in search of a solution to improve all their network operations and increase security
About Cisco Vulnerability Management
A tidal wave of vulnerabilities, but you can’t fix them all. Rely on extensive threat intel and patented prioritization to cut costs, save time, and keep your teams efficiently focused on reducing the biggest risks to your business. This is Modern Risk-Based Vulnerability Management. We created Risk-Based Vulnerability Management software and now we’re defining the modern model. Show your security and IT teams which infrastructure vulnerabilities they should remediate, when. Our latest version reveals exploitability can be measured, and accurately measuring exploitability can help you minimize it. Cisco Vulnerability Management (formerly Kenna.VM) combines real-world threat and exploit intelligence and advanced data science to determine which vulnerabilities pose the highest risk and which you can deprioritize. Spoiler alert: Your mega-list of “critical vulnerabilities” will shrink faster than a woolen sweater-vest in a hot cycle.
Other Popular Alternatives & Related Software
Vulcan Cyber
At Vulcan Cyber we’re changing the way businesses reduce cyber risk through vulnerability remediation orchestration. We help IT security teams go beyond remedial vulnerability management to help them drive vulnerability remediation outcomes. The Vulcan platform consolidates vulnerability and asset data, with threat intelligence and customizable risk parameters to deliver risk-based vulnerability prioritization insights. But we don't stop there. Vulcan remediation intelligence takes the vulnerabilities that matter to your business and attaches the remedies and fixes needed to mitigate the threat. Then Vulcan orchestrates and measures the rest of the remediation process with integrations and inputs into application security, DevSecOps, patch management, configuration management, and cloud security tools, teams and functions. From scan to fix, Vulcan Cyber delivers the unique ability to orchestrate the entire vulnerability remediation process to GET FIX DONE at scale.
Learn more
Saner CVEM
SecPod Saner CVEM is a continuous vulnerability and exposure management platform designed to help organizations discover, prioritize, and remediate risks before attackers can exploit them. The platform unifies asset discovery, vulnerability detection, compliance management, endpoint management, posture anomaly detection, patch management, exposure visibility, and risk prioritization in one workflow. Saner CVEM uses AI-powered asset visibility, machine-learning anomaly detection, and intelligent prioritization to identify both known vulnerabilities and exposure gaps that traditional scanners may miss. It evaluates risk using factors such as EPSS, CISA KEV status, SSVC, asset criticality, business context, MITRE ATT&CK mapping, and CWE mapping. The platform also supports integrated patch deployment, posture improvement, compliance automation, and continuous scanning across Windows, Linux, macOS, AIX, servers, endpoints, and third-party applications.
Learn more
Invicti Web + API
Invicti Web + API, formerly Acunetix, is a dynamic application security testing (DAST) platform for identifying and validating vulnerabilities across web applications, APIs, and other runtime assets. The platform automatically discovers applications, APIs, shadow assets, unlinked pages, and undocumented endpoints while supporting modern JavaScript applications and authenticated workflows. Its scanning engine detects more than 7,000 types of security issues, including vulnerabilities covered by the OWASP Top 10 and OWASP API Top 10 as well as business logic flaws. Invicti combines AI-driven risk scoring with runtime reachability, exploitability, and business context to help security teams prioritize vulnerabilities that represent demonstrable risk.
Learn more
KernelCare Enterprise
Global organizations trust TuxCare for live patching their critical Linux hosts and OT devices across their hybrid multi-cloud environments. No reboot is required to deploy and enable the TuxCare KernelCare Enterprise solutions to live patch Linux kernels and critical system libraries, including OpenSSL and Glibc. In contrast, all hosts and devices maintain the current production level uptime while receiving all security updates.
TuxCare automates the patching process and eliminates the need to wait weeks or months for reboot cycles to apply patches. TuxCare currently protects over 1 million workloads worldwide.
Tight integrations with popular patch management and vulnerability scanners, including Qualys, Crowdstrike, and Rapid7, enable TuxCare to fit seamlessly into existing infrastructure. The TuxCare secure patch server, ePortal, allows operations in gated and air-gapped environments.
Reduce risk by significantly reducing the mean time to patch vulnerabilities
Learn more
Pricing
Free Version:
Free Version available.
Free Trial:
Free Trial available.
Integrations
Company Information
Cisco
Founded: 1984
United States
www.cisco.com/site/us/en/products/security/vulnerability-management/index.html
Videos and Screen Captures
Other Useful Business Software
Build Data Resilience - Take the Assessment Today
Is your recovery strategy as strong as you think? Take this quick self-assessment to check your recovery readiness and gain tailored insights. In only 2 minutes, you'll learn where you fall on the recovery readiness scale.
Product Details
Platforms Supported
Cloud
Training
Documentation
Live Online
Webinars
In Person
Support
24/7 Live Support
Cisco Vulnerability Management Frequently Asked Questions
Cisco Vulnerability Management Product Features
IT Security
IP Protection
Supported
Vulnerability Scanning
Supported
Web Threat Management
Supported
Anti Spam
Not Supported
Anti Virus
Not Supported
Email Attachment Protection
Not Supported
Event Tracking
Not Supported
Internet Usage Monitoring
Not Supported
Intrusion Detection System
Not Supported
Spyware Removal
Not Supported
Two-Factor Authentication
Not Supported
Web Traffic Reporting
Not Supported
Patch Management
Alerts/Notifications
Supported
Network Wide Management
Supported
Patch Testing
Supported
Automatic Approval
Not Supported
Automatic Patch Deployment
Not Supported
Automatic Scans
Not Supported
Compliance Management
Not Supported
Custom Patches
Not Supported
Dashboard
Not Supported
Patch Prioritization
Not Supported
Remote Access/Control
Not Supported
Vulnerability Scanning
Not Supported
