01 - Introduction
Vulnerability management is not a point-in-time activity; it is a continuous, iterative lifecycle designed to systematically reduce an organization's ...
02 - Vulnerability Scanning and Asset Inventory
You cannot secure what you do not know exists. A robust vulnerability management program is built on the foundation of continuous, accurate asset disc...
03 - Prioritization and EPSS Scoring
Prioritization is the heart of Risk-Based Vulnerability Management (RBVM). With organizations facing thousands of vulnerabilities, you must determine ...
04 - Patch Management and Remediation
Finding and prioritizing vulnerabilities is useless unless you actually fix them. Patch management is the operational process of deploying updates to ...
05 - Vulnerability Metrics and KPIs
To ensure a vulnerability management program is effective, you must measure it. Executive leadership doesn't want to see a raw list of CVEs; they want...
06 - Hands-on Lab: Risk-Based Prioritizer Tool
In this lab, we will build a Python tool that simulates ingesting a raw vulnerability scanner report (which contains too many 'High' severity issues b...
07 - References and Further Reading
To continue expanding your knowledge on vulnerability management and risk prioritization, explore the following authoritative resources and frameworks...
Vulnerability Management Guide
Welcome to the AppSec Atlas Vulnerability Management Guide! In a landscape filled with continuous disclosures of new vulnerabilities, simply scanning ...