EASM
The continuous discovery and assessment of internet-visible assets and services from an external perspective.
Knowledge centre
Topic: Vulnerability Management
Read more
CTEM
A continuous programme for scoping, discovering, prioritising, validating and mobilising action around material exposure.
SSVC
A decision-tree approach that maps vulnerability evidence and stakeholder context to an action outcome.
CPE
A structured naming scheme used to identify hardware, operating systems and applications.
How to Build a Vulnerability-Management Operating Model
Turn scanning, ownership, risk decisions and remediation into one repeatable operating system.
Vulnerability SLAs: What Good Looks Like
Build treatment expectations around evidence and exposure instead of severity alone.
The Problem With Vulnerability Backlogs
Why ever-growing queues obscure risk and how to restore a manageable flow of decisions.
How to Prioritise Vulnerabilities Using Evidence
A repeatable workflow for reducing a large vulnerability population to a defensible and actionable priority list.
Vulnerability Management Metrics That Actually Matter
Move reporting away from raw finding counts and towards coverage, ageing, ownership and verified exposure reduction.
Why Critical Vulnerability Counts Are Often Misleading
Critical counts are easy to report and easy to misunderstand. Without coverage, exposure and age, they say very little about risk.