Managed Vulnerability Management

Is that one management too many?  Yesterday StillSecure announced that we were rolling out a managed vulnerability management service based around our VAM vulnerability management product.  Why a managed vulnerability service versus the SaaS model that is all the rage? Simple, for a large percentage of our target customers just having a vulnerability scanner and server hosted is not enough! They need help through the whole lifecycle of vulnerability management.  They need help in determining what assets to scan - why, what, when, how to scan.  What do to do with the results and most importantly they need help to asses their risk and take appropriate steps.  Traditional vulnerability management products and SaaS solutions just don’t do it for them.

On the other end of the spectrum security consultants can come in and give a picture in time assessment.  However because they are generally one time scans they lack the continuity to give a complete vulnerability lifecycle perspective. So we think the idea of a managed vulnerability management service is one whose time has come! Lets see what the market says.