Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

A surge of vulnerabilities can be overwhelming, but addressing every single one isn't feasible. Utilize comprehensive threat intelligence and innovative prioritization techniques to reduce expenses, streamline processes, and ensure that your teams concentrate on the most significant threats to your organization. This approach embodies Modern Risk-Based Vulnerability Management. Our Risk-Based Vulnerability Management software is pioneering a new standard in the field. It guides your security and IT teams on which infrastructure vulnerabilities to address and when to take action. The newest iteration demonstrates that exploitability can be quantified, and effectively measuring it can aid in its reduction. Cisco Vulnerability Management (previously known as Kenna.VM) merges practical threat and exploit insights with sophisticated data analytics to identify vulnerabilities that present the greatest risk while allowing you to deprioritize lesser threats. Expect your extensive list of “critical vulnerabilities” to diminish more quickly than a wool sweater in a hot wash cycle, providing a more manageable and efficient security strategy. By adopting this modern methodology, organizations can enhance their overall security posture and respond more effectively to emerging threats.

Description

IriusRisk is an open Threat Modeling platform that can be used by any development and operations team – even those without prior security training. Whether your organization follows a framework or not, we can work with all the threat modeling methodologies, such as STRIDE, TRIKE, OCTAVE and PASTA. We support organisations in financial services, insurance, industrial automation, healthcare, private sector and more. IriusRisk is the industry's leading threat modeling and secure design solution in Application Security. With enterprise clients including Fortune 500 banks, payments, and technology providers, it empowers security and development teams to ensure applications have security built-in from the start - using its powerful threat modeling platform. Whether teams are implementing threat modeling from scratch, or scaling-up their existing operations, the IriusRisk approach results in improved speed-to-market, collaboration across security and development teams, and the avoidance of costly security flaws.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

AT&T Alien Labs Open Threat Exchange Yes 
Amazon Web Services (AWS) No 
Axonius Yes 
Bugcrowd Yes 
CucumberStudio No 
CyCognito Yes 
FortifyData No 
GitHub No 
JUnit No 
Jira Service Management No 
Microsoft Threat Modeling Tool No 
Microsoft Visio No 
NorthStar Navigator Yes 
OAuth No 
Optiv Managed XDR Yes 
Pliant Yes 
Seeker Yes 
Serenity BDD No 
Tenable One Yes 
Veracode Yes 

Integrations

AT&T Alien Labs Open Threat Exchange No 
Amazon Web Services (AWS) Yes 
Axonius No 
Bugcrowd No 
CucumberStudio Yes 
CyCognito No 
FortifyData Yes 
GitHub Yes 
JUnit Yes 
Jira Service Management Yes 
Microsoft Threat Modeling Tool Yes 
Microsoft Visio Yes 
NorthStar Navigator No 
OAuth Yes 
Optiv Managed XDR No 
Pliant No 
Seeker No 
Serenity BDD Yes 
Tenable One No 
Veracode No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version Yes 

Pricing Details

Enterprise licences can vary depending on integrations and threat modeling requirements. Please do contact us for a more detailed breakdown. Pricing is done by threat model and not by user to keep costs manageable and predictable.
Free Trial No 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) Yes 
Online Support No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Cisco

Founded

1984

Country

United States

Website

www.cisco.com/site/us/en/products/security/vulnerability-management/index.html

Vendor Details

Company Name

IriusRisk

Country

Spain

Website

www.iriusrisk.com/

Product Features

IT Security

Anti Spam No 
Anti Virus No 
Email Attachment Protection No 
Event Tracking No 
IP Protection Yes 
Internet Usage Monitoring No 
Intrusion Detection System No 
Spyware Removal No 
Two-Factor Authentication No 
Vulnerability Scanning Yes 
Web Threat Management Yes 
Web Traffic Reporting No 

Network Security

Access Control No 
Analytics / Reporting No 
Compliance Reporting No 
Firewalls No 
Internet Usage Monitoring No 
Intrusion Detection System No 
Threat Response No 
VPN No 
Vulnerability Scanning No 

Patch Management

Alerts/Notifications Yes 
Automatic Approval No 
Automatic Patch Deployment No 
Automatic Scans No 
Compliance Management No 
Custom Patches No 
Dashboard No 
Network Wide Management Yes 
Patch Prioritization No 
Patch Testing Yes 
Remote Access/Control No 
Vulnerability Scanning No 

Vulnerability Management

Asset Discovery No 
Asset Tagging No 
Network Scanning No 
Patch Management No 
Policy Management No 
Prioritization No 
Risk Management No 
Vulnerability Assessment No 
Web Scanning No 

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring No 
Continuous Monitoring No 
Defect Tracking No 
Interactive Scanning No 
Logging and Reporting No 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis No 
Threat Intelligence No 
Web Inspection No 

Product Features

Risk Management

Alerts/Notifications Yes 
Auditing Yes 
Business Process Control Yes 
Compliance Management Yes 
Corrective Actions (CAPA) Yes 
Dashboard Yes 
Exceptions Management Yes 
IT Risk Management Yes 
Internal Controls Management Yes 
Legal Risk Management No 
Mobile Access No 
Operational Risk Management Yes 
Predictive Analytics Yes 
Reputation Risk Management No 
Response Management No 
Risk Assessment Yes 

Alternatives

Centraleyezer Reviews

Centraleyezer

Sandline

Alternatives

Devici Reviews

Devici

Security Compass
SD Elements Reviews

SD Elements

Security Compass
Fork Reviews

Fork

VerSprite Cybersecurity