Vulnerability Manager

While there is some overlap, these are separate tools. Vulnerability Manager checks the server your website runs on: the operating system, the software installed on it, the open ports, and the configuration, all against vulnerabilities that are already known and cataloged. A website security scanner tests your site itself, including your own code, forms, and logins, for flaws like SQL injection and cross-site scripting. Both are useful, and they answer different questions.

External scanning needs nothing installed and shows you what someone outside can reach. Internal scanning uses a small agent on the asset and sees considerably more, because most known vulnerabilities are not easily visible (i.e. without running an exploit against your server) from outside. (Note that "not visible from outside" is not the same as "not a problem" — a scanner asks polite questions, and an attacker does not.) Running both gives you the fullest picture.

Anything you run that has a public-facing IP address, or that you can install the agent on. That covers Windows and Linux servers, Unix systems, macOS machines, virtual machines, cloud instances, load balancers, firewalls, and devices on a private network. You add each asset yourself by entering its IP address—Vulnerability Manager assesses the machines you specify rather than searching your network for devices you have not told it about.

Findings include vulnerability severity ratings, whether it is confirmed or potential, relevant CVE references, and remediation guidance. You’ll see the recommended upgrade, links to the vendor’s patch, and any available workarounds. AI Remediation Advice goes further and gives the specific steps and commands for that server, along with how to check the fix worked.

Your external scan starts shortly after your subscription is set up, and your internal scan starts once the agent is installed and connected. Results appear in your dashboard once a scan completes. The first internal results can take a full cycle to come through (depending on your server’s available resources and other factors), so if it has been less than 24 hours, give the agent a little more time.

One subscription covers one server, so fifty servers mean fifty subscriptions. The price per server falls as you add more, from $12.00 a month down to $3.50 a month at a hundred assets or more, with discounts applied automatically when the assets are in the same account. See the pricing page for all tiers.

No contracts and no commitments. Pay monthly or annually, add or remove servers anytime, and get a lower per-server price as you scale. Cancel anytime.

No, and that is a deliberate choice rather than a missing feature. Customers told us clearly that they did not want a security product patching production servers on its own schedule. Vulnerability Manager finds the problem, tells you exactly how to fix it, and leaves the timing of the change with you.

96% of the checks we run have a known patch or fix behind them. Where the vendor has not released one, the report tells you so plainly instead of leaving you guessing, and AI Remediation Advice can often suggest a way to work around the issue or reduce the risk until a patch exists.

Historical data is used to show you when a vulnerability was first found, whether it has been fixed, etc. Your dashboard and your reports show your current position — the most recent result for each finding — rather than a record of every scan we have run. You can export your current results as a CSV file or a PDF whenever you like and keep your own copies.

Vulnerability Manager is not a compliance certification product, and it does not issue compliance reports. However, it does the thing many of those requirements are actually asking for: it finds and documents the known vulnerabilities on the assets you add, on a schedule, and lets you export your current results as a PDF or a CSV to send to an insurer, an auditor or a client. If your compliance framework requires documented evidence of general vulnerability scans run on your systems, Vulnerability Manager can help you.