DATASHEET

Ivanti Neurons for Risk-Based
Vulnerability Management (RBVM)
Improve cybersecurity posture with true risk-based vulnerability management and prioritization
risk is a time-consuming, error-prone process
Evolve your vulnerability management strategy

for organizations using traditional approaches toto a risk-based approach with Ivanti Neurons

vulnerability management.

for RBVM. This SaaS offering enables you
to efficiently and effectively prioritize thevulnerabilities and weaknesses that pose you
the most risk for remediation to better protect
against data breaches, ransomware and othercyber threats.

Before such organizations can even begin prioritizing
vulnerabilities and weaknesses for remediation, theymust first gather a range of disparate data — fromscanner findings to threat intelligence — normalizethat data and prepare it for use. When done manually,
these processes can take days, weeks or months tocomplete, and always involve human error.

Time for a new approach tovulnerability management

The prioritization process is no better. Consider

There are over 270,000 known vulnerabilities.1

missing from the CISA Known Exploited VulnerabilitiesFortunately, organizations don’t need to remediate(KEV) catalog. Additionally, three highly popular

every vulnerability and weakness that appears in theirscanners still haven’t added plugins and detection

IT environments. Unfortunately, identifying the raresignatures for a combined 20 ransomware

vulnerability or weakness that poses them significant

vulnerabilities.2

ivanti.com/neurons

ransomware vulnerabilities. Seventy-four percent
aren’t rated Critical under CVSS v3 and 156 are

On top of all that, security and IT decision makers
actually cite the lack of cooperation between theirteams as the top challenge they face in defending
against cyberattacks.3 This friction between
vulnerability management stakeholders can slow
remediation and leave the organization prone toattack.

Introducing Ivanti Neurons for RBVM
Measure and control your true cybersecurity risk
to better protect against cyber threats like data
breaches and ransomware with the capabilities foundin Ivanti Neurons for RBVM. These capabilities comepackaged in a single interface so you can phase outthe ‘swivel chair’ approach that’s defined vulnerability
management practices of the past.

Key capabilities
Prioritize immediate actions based on
threat risk
Move from detection of vulnerabilities andweaknesses to remediation in minutes — not months— with a contextualized, risk-based view of yourorganization’s cybersecurity posture. Ivanti Neurons
for RBVM measures risk and prioritizes remediation
activities through a process that involves continuous
correlation of an organization’s infrastructure with:

Further, unlike CVSS, Ivanti’s proprietary Vulnerability
Risk Rating (VRR) lets organizations accurately■ Internal and external vulnerability data.

measure impact and determine the likelihood a■ Threat intelligence.

vulnerability will be exploited. Ivanti Neurons for RBVM

■ Manual pen test and research-based findings.
■ Business asset criticality.

also specifically identifies remote code execution,privilege escalation, ransomware, and trending
and active vulnerabilities. This information helps

Best of all: you arrive at a fully informed plan of attackorganizations focus on those vulnerabilities that posewith little to no manual effort required.

them the most risk.

Ivanti Neurons for Risk-Based Vulnerability Management (RBVM) | DATASHEET

2Focus on remediation, not administration

Additionally, the product quantifies an organization’sImprove your cybersecurity posture without all therisk profile in the form of an Ivanti RS3 score. Thisscore ensures all security stakeholders are intime, effort and errors traditionally associated withalignment on the organization’s overall security level.

doing so through a range of automations and other

Bidirectional integrations with ticketing systems likeefficiency-enhancing features:

Ivanti Neurons for ITSM improve coordination between
those working to improve that security level.

■ Create playbooks to automate common or

repetitive tasks traditionally handled by securityanalysts.
■ Set vulnerability closure due dates automatically if

desired with service-level agreement automations.
■ Receive near-real-time alerts outside the productthat link back to a product page containing
information related to the subscribed event.
■ Easily filter hosts and host findings by trending

criteria that reveal their exposure to the top
critical vulnerabilities — like ransomware andtrending CVEs — using system views pushed by
the Ivanti security team.
■ Deliver prioritized vulnerabilities directly to Ivanti

Neurons for Patch Management for remediation —no more sending CSVs of CVE IDs via emailand chat.

Enable better collaboration amongst
security stakeholders
Cultivate communication and cooperation among
security stakeholders from across the organization by
providing them with timely information relevant to theirroles. Ivanti Neurons for RBVM employs role-based
access control (RBAC) so product access can besafely provided to all applicable personnel.
Once inside the product, users have access todashboards designed for personnel from the SOC
to the C-suite. They can modify these dashboards
to fit more specific use cases, or even leverage userwidgets to create custom dashboards that meet theexact needs of different roles and teams.

Ivanti Neurons for Risk-Based Vulnerability Management (RBVM) | DATASHEET

3

Features & functions
FeatureFunction
Achieve a wide view of cyber risk with a product that ingests data from network scanners, endpoints, databases and IoT

Diverse data sources

devices, vulnerability findings from 100+ sources, manual findings from research and pen testing teams, and custom
data sources.

Threat engine

Vulnerability Risk Rating (VRR)

Ivanti RS3Automation

Alerts and notifications

Customizable data organization

Dashboards

Threat-based views

Gain unparalleled insights on vulnerabilities — like which are tied to ransomware — via human-generated and AI-driven threat
intelligence sourced from Ivanti Neurons for Vulnerability Knowledge Base.
Quickly determine the risk posed by a vulnerability with numerical risk scores that consider the intrinsic attributes of thevulnerability plus its real-world threat context.
Attain a quantified view of your organization’s risk profile via a proprietary scoring methodology that considers VRR,
asset business criticality, threat intelligence and external accessibility.
Replace a range of manual tasks with automation so employees can focus on remediation actions and strategic initiatives
rather than administration.
Gain instant awareness of pertinent events via near-real-time alerts sent from a notification engine. Similarly, direct other users
to important information within the product using deep links.
Uncover actionable insights with user widgets that allow for the creation of custom dashboards, plus the ability to pivot datain list views.
Quickly discover how top critical vulnerabilities — like Log4j and those associated with Patch Tuesday releases — manifest
themselves in your environment by utilizing threat-based views. Also create and share your own custom views.
Quickly discover how specific threats like BlueKeep, WannaCry or the FBI/DHS/CISA top 10 exploited vulnerabilities manifest
themselves in your organization’s environment by utilizing threat-based filters. Also create and share your own custom filters.
Pair Ivanti Neurons for RBVM with Ivanti Neurons for ASOC to extend risk-based vulnerability management across a greater

Neurons integrations

area of your attack surface. Leverage out-of-the-box integrations with Ivanti Neurons for ITSM and Ivanti Neurons for PatchManagement to empower vulnerability management practitioners throughout the organization to perform their tasks more
efficiently and effectively.

Ivanti Neurons for Risk-Based Vulnerability Management (RBVM) | DATASHEET

4About Ivanti
Ivanti elevates and secures Everywhere Work sothat people and organizations can thrive. We maketechnology work for people, not the other way around.
Today’s employees use a wide range of corporate
and personal devices to access IT applications

For more information, or to contact Ivanti,
please visit ivanti.com

and data over multiple networks to stay productive
wherever and however they work. Ivanti is one ofthe only technology companies that finds, manages,
and protects each IT asset and endpoint in anorganization. Over 40,000 customers, including 88
of the Fortune 100, have chosen Ivanti to help themdeliver an excellent digital employee experienceand improve IT and security team productivity andefficiency. At Ivanti, we strive to create an environment
where all perspectives are heard, respected, andvalued, and we are committed to a more sustainable
future for our customers, partners, employees, andthe planet.
For more information, visit ivanti.com andfollow @GoIvanti.

1.

Copyright © 2023, Ivanti. All rights reserved. IVI-2673 10/23 RW/MM/DH/NH

Data pulled from Ivanti Neurons for Vulnerability
Knowledge Base on June 29, 2023
2. Cyber Security Works, Cyware, Ivanti, Securin, “2023Spotlight Report: Ransomware Through the Lens ofThreat and Vulnerability Management”, 16 February 2023.
https://www.securin.io/ransomware/
3. ExtraHop, “Cyber Confidence Index 2022”, 1 March 2022.
https://www.extrahop.com/resources/papers/cyberconfidence-index-2022/