Best Risk-Based Vulnerability Management Software - Page 11

Derive

Derive is the cybersecurity risk and operations platform that helps teams quantify risk, prioritize actions, and prove impact. Built on our Peer Risk Benchmarks – the most complete real-world dataset of cyber losses – Derive shows which risks matter most, what actions reduce loss, and where to invest next. The platform replaces legacy GRC tools with three integrated modules: Risk: Quantify and prioritize risk in dollars using real-world data Governance: Centralize controls, owners, assets, and frameworks Operations: Built-in workflows for user reviews, third-party and AI risk, IR/BC/DR, and more Unlike static tools or compliance checklists, Derive is dynamic. Risk updates in real time as your team acts. Every task is ranked by measurable risk reduction – so you know exactly what to do next.

DragonSoft DVM

Vulnerability assessment software with network scanning, vulnerabilities evaluation, risk assessment, reporting and remediation.

EcoTrust

Empirical Security

Empirical Security builds a cybersecurity platform to deliver AI-driven vulnerability management by modeling both global and enterprise-specific threat landscapes, enabling security teams in enterprises to reduce alert noise, prioritize critical threats, and make data-informed decisions.

Eracent SBOM-HQ

SBOM-HQ™ - from Eracent SBOM-HQ™ provides a well-rounded set of data, reporting and analysis features that help organizations minimize risks and comply with cyber mandates and directives. While SBOM-HQ™ provides value to in-house and commercial application development teams, it is also unique in its approach to meeting the requirements of organizations that purchase or subscribe to software from numerous publishers. These “software consumers” will have to manage dozens, hundreds, or even thousands of SBOMs for products that they use, and this is impractical or impossible to do one SBOM at a time. SBOM-HQ™ is based around a centralized, single-source repository of libraries, components, and other related data from SBOMs. It dramatically reduces response time when a vulnerability is reported since it eliminates the need to review SBOMs individually. How does SBOM-HQ™ work? Customers upload their SBOM files via the user interface. During this straightforward process, users can assign related information that can be used to support reporting, filters, data access, and more. This information includes Publisher, Line of Business, Application Component, and more. SBOM-HQ™ “deconstructs” each uploaded SBOM and records the software product to which the SBOM belongs and all the SBOM’s content. This results in an index of components and libraries mapped to products. If a vulnerability is reported by NIST or another organization, customers get an immediate report of every product in use in their organization that includes the affected component or library. SBOM-HQ™ is continuously monitored and updated, and it leverages vulnerability data from NIST and other trusted global sources. It uses this data to display risk scores, levels of criticality, and more. SBOM-HQ™ also provides visibility into license types for each component and library, reducing the risk of unknowingly using a library that has excessive restrictions when less risky options are available. The system offers version tracking – the version in use, newer available versions, and version history – as well as lifecycle dates that support obsolescence management. The dedicated open source library within Eracent’s IT-Pedia® product data library provides a solid foundation for SBOM-HQ™’s analysis and reporting. Who can benefit from using SBOM-HQ? SBOM-HQ is designed to support all teams engaged in the use and operation of software. DevOps – SBOM-HQ integrates into CI/CD to generate and enrich SBOMs with real time risk data, ensuring secure and compliant releases. Procurement – SBOM-HQ equips procurement teams with SBOM-driven insights into software quality and licensing risks, enabling smarter vendor selection and safer software purchases. CyberSec teams – SBOM-HQ evaluates cyber security aspects of purchased software and monitors new vulnerabilities that appear. ITOps – SBOM-HQ exposes software weaknesses and helps mitigate the risks. Legal and Licensing teams – SBOM-HQ delivers clear visibility into open source licenses, flags conflicts early, and provides audit-ready compliance reports. Why SBOM-HQ? SBOM-HQ is designed to support software buyers and users, not just software publishers. While most SBOM solutions stop at the software development life cycle, SBOM-HQ goes further. It empowers software consumers to continuously monitor not only what they build, but also what they buy - from design and procurement, through integration, all the way to production in their own data centers. With SBOM-HQ, transparency extends beyond development, delivering visibility and control across the entire software supply chain. To learn more about SBOM-HQ™, register for a free trial at sbomhq.com or contact Eracent today!

Eracent Vulnerability Manager

ESOF - Enterprise Security in One Framework

The Vulnerability Management Platform for Enterprise Security in One Framework.

FastiAds

FastiAds is an AI-powered ad automation platform for small business owners and solopreneurs who run Meta (Facebook and Instagram) and Google ads without a dedicated marketing team.

GapSwift

GapSwift is a Continuous Digital Assurance platform that helps IT and security teams build clearer visibility across their Windows environment. GapSwift combines Asset Intelligence with Windows security posture, Security Gaps, Vulnerability Intelligence and a high-level Cyber Score to help teams understand assets and the security evidence associated with them. The GapSwift Collector provides automated discovery and inventory visibility for supported Windows workstations and Windows Servers. Asset information can include hardware, operating system and build details, processor, memory, storage, network interfaces, installed software, Windows hotfix evidence, users and applicable local administrator context, services and selected licensing information. Teams can also maintain ownership, location, categorization and status information and review asset history and changes over time. GapSwift connects asset evidence with security context so teams can move beyond static inventory toward mor

Guardian by terrasecure

Guardian provides continuous visibility into your cybersecurity posture—helping you discover vulnerabilities, prioritize risk, monitor threats, and manage remediation from one centralized platform.

HACK-X NODE

HACK-X NODE is a Risk and Vulnerability Management PTaaS product delivering on-demand, continuous and scalable Security Assessments with a unique blend of automated scanning and in-depth manual penetration testing. HACK-X NODE is disrupting the traditional VAPT method by its unique auto-configuration feature and making the entire process very seamless. This product is one stop solution for all VAPT needs: Web Application Android Application iOS Application Network

HCL BigFix SaaS Remediate

HCL BigFix SaaS Remediate is developed by HCLSoftware, a division of HCLTech and a global enterprise software company with offices and labs worldwide. HCLSoftware serves more than 20,000 organizations, including a majority of the Fortune 100 and nearly half of the Fortune 500, across cybersecurity, digital transformation, data analytics, and AI and automation. The BigFix platform has been a trusted name in endpoint management for over two decades. HCL BigFix SaaS Remediate is the cloud-native evolution of that platform — purpose-built to bring enterprise-grade vulnerability remediation to organizations that need immediate time-to-value without the burden of on-premises infrastructure. The platform is cloud-hosted, requires no hardware or server setup on the customer side, and provisions a fully functional instance within minutes of registration. HCL BigFix SaaS Remediate automates the entire vulnerability remediation lifecycle from a single cloud console. Its remediation engine is powered by 500,000+ pre-tested Fixes — pre-built, pre-validated remediation scripts maintained by HCL BigFix — covering 120+ operating system versions and 700+ third-party applications, delivering a 98%+ first-pass patch success rate. The CyberFOCUS Analytics engine integrates CISA's Known Exploited Vulnerabilities (KEV) catalog and MITRE ATT&CK adversary data to shift prioritization from theoretical CVSS scores to vulnerabilities actively being exploited in the wild — enabling teams to remediate CISA KEVs up to 100x faster than manual processes. The Integrated Vulnerability Remediation (IVR) capability ingests scan findings from Tenable and automatically correlates each CVE with the most appropriate available fix using the BigFix supersedence engine, eliminating manual correlation entirely. For zero-days and non-patch scenarios, the platform supports custom scripts, registry edits, and configuration changes targeted to specific device groups before vendor patches are available. Protection Level Agreements (PLAs) allow teams to define remediation performance targets and track results — patch success rates, mean time to remediate, and compliance percentages — continuously across shared dashboards visible to IT, security, and executive stakeholders. The core problem HCL BigFix SaaS Remediate solves is the remediation gap — the weeks or months that pass between a vulnerability being discovered and it actually being fixed. Most organizations have scanners that generate findings; far fewer have a reliable, automated system to act on those findings at speed and scale. BigFix SaaS Remediate closes that gap by connecting detection directly to execution. IT teams stop managing manual patch cycles across fragmented tools. Security teams stop watching findings age in backlogs. Leadership gains board-reportable metrics that prove risk is being reduced — not just monitored. The Platform delivers measurable impact from day one: one global manufacturing customer discovered over 8,000 vulnerabilities their existing scanner had missed within hours of deployment. A 14-day fully functional free trial is available with no credit card required, no feature restrictions, and 24/7 support.

Humanize Salience

Humanize Salience is the N1 quantified cyber risk management solution translated for C-level executives. Our solution helps organizations to proactively assess the hidden risks of cyber vulnerabilities through leveraging advanced MetaDiscovering, MetaTreats Analysis, and modeling techniques. We use quantification models to estimate the range of probabilities and impacts of potential security events so that business leaders can be aware of the likelihood and impact of compliance and financial risks.

Inspectiv

Inspectiv is an all-in-one AppSec testing platform that simplifies the process of discovering, validating, and remediating vulnerabilities. By offering penetration testing, bug bounty programs, dynamic application security testing (DAST), and vulnerability disclosure (VDP) in a single solution, organizations can reduce risk, maintain compliance, and strengthen their security posture. With streamlined management, minimal operational overhead, and predictable pricing, Inspectiv delivers impactful results that make security testing more efficient and effective.

Invield 360

Invield 360 is a cybersecurity platform that gives organizations continuous, 360-degree visibility across web, API, network, cloud, and compliance risk. It combines vulnerability scanning with a risk-focused testing approach, helping security teams prioritize what actually needs fixing instead of chasing raw vulnerability counts.