ManageEngine Vulnerability Manager Plus is a comprehensive, all-in-one exposure management solution designed to help IT security teams build a proactive cybersecurity foundation. Rather than reacting to breaches, it empowers organizations to scan continuously, assess, prioritize, and remediate vulnerabilities before attackers can exploit them, all from a single, unified console.
Asset discovery, vulnerability assessment and threat prioritization: Vulnerability Manager Plus manages every endpoint in your network, such as desktops, laptops, servers, virtual machines, DMZ servers, and network devices, whether in local offices, remote branches, or roaming environments. It delivers complete, real-time visibility into all vulnerabilities in a single window, including known, unknown, zero-day, and actively exploited vulnerabilities. AI-powered threat intelligence assigns risk scores to each vulnerability, helping security teams cut through the noise and focus remediation efforts on what matters most.
Vulnerability remediation: This is the only vulnerability detection platform that comes with built-in patching, and automated patch deployment. It supports patching for Windows, macOS, and Linux operating systems, along with over 1,100 third-party applications. Admins can customize deployment policies, test and approve patches before rollout, and decline patches for specific groups; all while staying in control of the patching lifecycle from end-to-end.
Security configuration management Vulnerability Manager Plus identifies misconfigurations in operating systems, applications, and web servers, and provides actionable steps to restore compliance. It audits firewalls, antivirus status, and BitLocker configurations; enforces strong password policies and account lockout settings; verifies memory protection settings like ASLR, DEP, and SEHOP; and manages share permissions and legacy protocol settings, all without disrupting business operations.
Web server hardening: Vulnerability Manager Plus continuously monitors web servers for default and insecure configurations, validates SSL certificate setup, checks HTTPS enablement, and restricts unauthorized access at the server root level. Context-aware analysis delivers targeted security recommendations to harden your web servers.
High-risk software, port, and antivirus audit: Stay ahead of risk with real-time visibility into end-of-life software, unsafe peer-to-peer applications, remote sharing tools, and open ports. Identify systems running outdated or disabled antivirus solutions and remediate them in a click.
Compliance auditing: Automate compliance audits against regulations such as CIST, NIST, and UK Cyber Essentials across multiple machines and multiple benchmarks simultaneously. Customize benchmark rules to fit your organization's unique policies, and access detailed remediation guidance for every violation flagged.
Network device vulnerability management: Maintain a consolidated inventory of all network devices across local and remote sites. Identify firmware versions, detect associated vulnerabilities, group devices by OS or vendor, and deploy the right firmware patches efficiently to close exposure gaps faster.
System quarantine policy: Define compliance conditions based on OS patches, installed software, services, registry entries, file versions, and more. Automatically isolate non-compliant systems with network restrictions and restore normal access once issues are resolved, keeping your network clean without manual intervention.
Vulnerability Manager Plus supports 18 languages, and supports patching for 1100+ applications, making it a fit for organizations of all sizes seeking a single, powerful platform to manage their entire vulnerability lifecycle.
Average Rating: 4.7/5.0
Total Reviews: 3
How Do G2 Users Rate ManageEngine Vulnerability Manager Plus?
-
Has the product been a good partner in doing business?: 9.2/10 (Category avg: 9.2/10)
-
Reporting: 10.0/10 (Category avg: 8.8/10)
-
Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
Who Is the Company Behind ManageEngine Vulnerability Manager Plus?
-
Seller: Zoho
-
Year Founded: 1996
-
HQ Location: Austin, TX
-
Twitter: @Zoho
137,880 Twitter followers
-
LinkedIn® Page: www.linkedin.com
30,913 employees on LinkedIn®
-
Phone: +1 (888) 900-9646
Who Uses This Product?
-
Company Size: 67% Medium, 33% Large
What Do G2 Reviewers Say About ManageEngine Vulnerability Manager Plus?
AI-generated summary from verified user reviews
Pros
- Users find the effective detection capabilities of ManageEngine Vulnerability Manager Plus essential for global patch management efficiency.
- Users find the ease of managing patches globally with ManageEngine Vulnerability Manager Plus incredibly beneficial and user-friendly.
- Users find ManageEngine Vulnerability Manager Plus to be the best tool for patch management, thanks to its simplicity and global reach.
- Users find patch management simple and efficient with ManageEngine Vulnerability Manager Plus across global machines.
- Users find ManageEngine Vulnerability Manager Plus excellent for simplifying global patch management across all their devices.
Cons
- Users report encountering false positives, where some CVEs listed as vulnerable are not actually identified in ManageEngine.
- Users report inaccuracy issues in CVE ID identification, leading to confusion and unreliable vulnerability assessment.
- Users report security vulnerabilities inconsistencies, where some CVE IDs are not identified correctly by ManageEngine.
- Users often find discrepancies in CVE identification between MDE reports and ManageEngine, leading to confusion.
