SaltStack
SaltStack is an intelligent IT automation platform that can manage, secure, and optimize any infrastructure—on-prem, in the cloud, or at the edge. It’s built on a unique and powerful event-driven automation engine that detects events in any system and reacts intelligently to them, making it an extremely effective solution for managing large, complex environments.
With the newly launched SecOps offering, SaltStack can detect security vulnerabilities and non-compliant, mis-configured systems. As soon as an issue is detected, this powerful automation helps you and your team remediate it, keeping your infrastructure securely configured, compliant, and up-to-date.
The SecOps suite includes both Comply and Protect. Comply scans and remediates against CIS, DISA-STIG, NIST, PCI, HIPAA compliance standards. And Protect scans for vulnerabilities and patches and updates your operating systems.
Learn more
Saner CVEM
SecPod Saner CVEM is a continuous vulnerability and exposure management platform designed to help organizations discover, prioritize, and remediate risks before attackers can exploit them. The platform unifies asset discovery, vulnerability detection, compliance management, endpoint management, posture anomaly detection, patch management, exposure visibility, and risk prioritization in one workflow. Saner CVEM uses AI-powered asset visibility, machine-learning anomaly detection, and intelligent prioritization to identify both known vulnerabilities and exposure gaps that traditional scanners may miss. It evaluates risk using factors such as EPSS, CISA KEV status, SSVC, asset criticality, business context, MITRE ATT&CK mapping, and CWE mapping. The platform also supports integrated patch deployment, posture improvement, compliance automation, and continuous scanning across Windows, Linux, macOS, AIX, servers, endpoints, and third-party applications.
Learn more
Clone Systems PCI ASV Scanning
PCI ASV Scanning is a web-based service for merchants and service providers that need quarterly external vulnerability scans for PCI DSS. Users can create targets for IP addresses or domains, run scans immediately or schedule them, review vulnerability findings, and rescan after remediation. The portal provides PCI scan results and an Attestation of Scan Compliance for a passing scan; it also includes an online PCI self-assessment questionnaire to support related compliance work. The service is delivered through a managed scanning portal, with no software to install. Annual packages are sized by the number of external IP addresses or domains, from one asset to larger scopes. Clone Systems performs the scans as a PCI SSC Approved Scanning Vendor.
Learn more
Invicti Web + API
Invicti Web + API, formerly Acunetix, is a dynamic application security testing (DAST) platform for identifying and validating vulnerabilities across web applications, APIs, and other runtime assets. The platform automatically discovers applications, APIs, shadow assets, unlinked pages, and undocumented endpoints while supporting modern JavaScript applications and authenticated workflows. Its scanning engine detects more than 7,000 types of security issues, including vulnerabilities covered by the OWASP Top 10 and OWASP API Top 10 as well as business logic flaws. Invicti combines AI-driven risk scoring with runtime reachability, exploitability, and business context to help security teams prioritize vulnerabilities that represent demonstrable risk.
Learn more
