Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Kontra Hands-On Labs and e-Learning Courses provide a practical and scalable way to embed secure coding skills into development teams. The training combines 50+ short-form video lessons with over 300 interactive vulnerability labs that simulate real-world security failures. Developers don’t just hear about issues—they actively exploit vulnerabilities like Log4Shell and learn to fix them using code that matches their actual stacks. Covering 25+ technologies, each lab delivers a fast, focused experience with most exercises completed in under 10 minutes. This keeps developers engaged without disrupting their workflow. Completion rates are over 3x higher than traditional training models, helping AppSec leaders embed secure practices earlier in the SDLC. Training is role-based and aligned with major compliance frameworks including PCI-DSS, ISO 27001, and NIST. Optional ISC2 co-branded certifications are available, providing a path for developers to validate their secure coding competencies. Content is SCORM-compliant and can be delivered flexibly—either hosted or deployed directly into your own LMS. This ensures easy adoption whether you’re centralizing training or enabling business units to self-manage. L&D and AppSec leaders gain immediate visibility into training status with reporting on completions, coverage by framework, and readiness across teams. This supports both audit prep and internal program performance tracking. With developer-first content, flexible deployment, and measurable outcomes, Kontra + Courses helps security and engineering teams build software that’s secure by design—without slowing down delivery.

Description

ManageEngine Vulnerability Manager Plus is a comprehensive exposure management solution that gives IT and security teams the visibility, intelligence, and built-in remediation tools needed to stay ahead of attackers across every endpoint in their network. Most organizations struggle with vulnerability management because their tools only identify problems without helping fix them. Security teams juggle separate scanning tools, patch management solutions, and compliance platforms while attackers exploit gaps created by delayed remediation and fragmented workflows. Vulnerability Manager Plus eliminates this fragmentation by combining asset discovery, AI-powered vulnerability assessment, threat prioritization, built-in patch management, configuration management, and compliance automation into a single unified platform. Every endpoint is continuously scanned for known vulnerabilities, zero-day threats, and actively exploited flaws with risk scores assigned based on real-world threat intelligence. Built-in patch management automates deployment across Windows, macOS, Linux, and 1,500+ third-party applications without separate licensing. Admins can test and approve patches before rollout, customize deployment policies, and deploy pre-built scripts for zero-day vulnerabilities immediately. Security configuration management audits firewalls, antivirus status, BitLocker encryption, and password policies across Windows endpoints. High-risk software auditing identifies end-of-life applications and unauthorized remote sharing tools, while antivirus auditing flags unprotected endpoints. Automated compliance audits against CIS, NIST, and UK Cyber Essentials provide detailed remediation guidance.

API Access

Has API Yes 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

360Learning Yes 
Active Directory Yes 
Amazon Web Services (AWS) Yes 
Angular Yes 
C++ Yes 
Docker Yes 
Flask Yes 
Java Yes 
ManageEngine ServiceDesk Plus No 
Microsoft Azure Yes 
Oracle PeopleSoft Yes 
Python Yes 
React Yes 
SAP SuccessFactors Yes 
SQL Yes 
Scala Yes 
Skillsoft Yes 
Splunk Enterprise Security No 
Syslog-ng No 
Workday Extend Yes 

Integrations

360Learning No 
Active Directory No 
Amazon Web Services (AWS) No 
Angular No 
C++ No 
Docker No 
Flask No 
Java No 
ManageEngine ServiceDesk Plus Yes 
Microsoft Azure No 
Oracle PeopleSoft No 
Python No 
React No 
SAP SuccessFactors No 
SQL No 
Scala No 
Skillsoft No 
Splunk Enterprise Security Yes 
Syslog-ng Yes 
Workday Extend No 

Pricing Details

$400 per year
Free Trial Yes 
Free Version No 

Pricing Details

$0.9/device/month
Free: up to 25 devices
Professional: Starts @ $0.9 /device/month
Enterprise: Starts @ $1.55/devices/month
Free Trial Yes 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App Yes 
iPad App Yes 
Android App Yes 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Security Compass

Country

Canada

Website

www.securitycompass.com/training/

Vendor Details

Company Name

ManageEngine

Founded

1996

Country

United States

Website

www.manageengine.com/vulnerability-management/

Product Features

Product Features

Endpoint Protection

Activity Log Yes 
Antivirus No 
Application Security Yes 
Behavioral Analytics No 
Device Management Yes 
Encryption Yes 
Signature Matching No 
Web Threat Management Yes 
Whitelisting / Blacklisting Yes 

Vulnerability Management

Asset Discovery Yes 
Asset Tagging Yes 
Network Scanning Yes 
Patch Management Yes 
Policy Management Yes 
Prioritization Yes 
Risk Management Yes 
Vulnerability Assessment Yes 
Web Scanning Yes 

Vulnerability Scanners

Asset Discovery Yes 
Black Box Scanning Yes 
Compliance Monitoring Yes 
Continuous Monitoring Yes 
Defect Tracking Yes 
Interactive Scanning Yes 
Logging and Reporting Yes 
Network Mapping Yes 
Perimeter Scanning Yes 
Risk Analysis Yes 
Threat Intelligence No 
Web Inspection Yes 

Alternatives

Alternatives

SecureCodingHub Reviews

SecureCodingHub

Secure Coding Hub
Saner CVEM Reviews

Saner CVEM

SecPod Technologies