VulnTrek brings findings from your security tools into one organisation-scoped workflow: prioritise the risks that matter, route work to an owner, and keep evidence behind every confirmed fix.
Last reviewed:
Connect supported security tools or import findings into a common intake workflow. Keep the original source context while bringing asset, ownership and vulnerability information together. VulnTrek complements your scanners and operational tools rather than replacing them; visibility depends on the sources and assets you connect.
Review severity alongside available exploit intelligence, internet exposure and business context. CISA KEV and EPSS provide different signals: known exploitation and estimated exploitation probability. Neither a network connection nor a high severity label alone proves that a flaw is exploitable. Evidence and its limitations remain part of the decision.
Treat the same issue on the same asset as a duplicate, while keeping the same advisory on different assets separate. Preserve source evidence and recorded merge decisions so teams can understand why findings were brought together. Review uncertain matches rather than treating similar wording as proof of identity.
Assign an accountable owner and track fix-by expectations. Send findings to connected Jira or Linear workflows, then follow progress through verification and closure. AI can explain evidence and prepare recommendations; people approve consequential remediation. VulnTrek does not autonomously patch systems or change firewall or identity permissions.
A closed ticket is not, on its own, proof that a vulnerability is fixed. Record the reason and supporting evidence when an authorised owner or admin confirms closure. Keep decisions and evidence append-only for later review. Compliance mapping views help present this operational evidence; they do not certify the organisation or establish compliance.
A scanner discovers potential issues. Vulnerability management software helps teams organise findings, decide what needs attention, assign responsibility and verify outcomes. VulnTrek works downstream of your connected security tools and imported findings.
Yes. Setup readiness brings organisation settings and review status together. Admins can set P0 critical fix-by deadlines and a chosen risk tolerance, review supported document-derived proposals individually, and compare a local policy with available baselines. Missing peer or regional evidence remains unbenchmarked; a baseline never silently changes settings.
VulnTrek supports IT and OT workflows according to the organisation’s enabled modules. OT advisory and device context remain distinct from ordinary IT findings. Cyber Range is separately entitled, not included automatically with either module.
Use a representative finding from your own tools. Follow its source evidence, asset match, duplicate decision, priority, owner, ticket and closure evidence. Confirm the integrations, enabled modules and approval boundaries needed for your environment before deciding.