Better Together:

Vulnerability Scanners& Ivanti Risk-Based Solutions
Vulnerability scanners are essential cybersecurity tools, but othersoftware is needed to create a strong vulnerability management stack.
Ivanti’s risk-based solutions get the most out of scanner data while
making vulnerability management processes more efficient andeffective. The result: you minimize cybersecurity risk along with thetime and effort spent on vulnerability management.

ivanti.com

SOLUTION BRIEF

Aggregation
Vulnerability Scanners

Ivanti Risk-Based Solutions

Modern enterprises must use multiple scanners –Ivanti Neurons for Risk-Based Vulnerability Management (RBVM) and Ivanti Neurons for App Security

network, SAST, DAST, OSS, container – endpoint

Orchestration & Correlation (ASOC) use automation to measure risk and prioritize remediation activities.

detection and response (EDR) software, and othertools to achieve comprehensive coverage in their

These risk-based solutions work by correlating data from network scanners, application scanners and other tools

security posture management efforts. Without anwith threat intelligence and a range of other security data. Asset criticality is also incorporated into the correlation

automated way to aggregate output from their tools,

process to contextualize prioritization for every environment.

companies are forced to manage the flood of
disparate data these siloed sources produce manually.

Leveraging these capabilities, you can move from detection of the vulnerabilities and weaknesses that pose yourorganization the most risk to remediation in minutes – not months.

This process is time-consuming and prone to errors.
It requires security analysts to gather, normalize andprepare volumes of data for the vulnerability prioritization
process. All of these steps delay – and sometimes
outright prevent – remediation of vulnerabilities.
Further, manual prioritization of vulnerabilities basedon insufficient scoring methods, like the Common
Vulnerability Scoring System (CVSS), is also prone toleaving the riskiest vulnerabilities unresolved.

20x

increase in scan cadence
over the past decade1

Better Together: Vulnerability Scanners & Ivanti Risk-Based Solutions 1

Coverage
Vulnerability Scanners
No scanner can identify every vulnerability in anenvironment. Instead, they’ll identify only thosevulnerabilities for which their developers have createdplugins or detection signatures.

20

ransomware vulnerabilities
go undetected bypopular scanners2

Even with an arsenal of scanners, companies will still
have gaps in coverage. Plus, without an easy way toaggregate the data from those scanners, many high-risk
vulnerabilities are still destined to fall through the cracks.

Ivanti Risk-Based Solutions
Ivanti Neurons for RBVM and ASOC increase anorganization’s coverage by aggregating data fromdisparate scanners. And instead of seeing
vulnerabilities spread out across separate scannerscreens, Ivanti lets users view them all in the sameplace – with a unified risk scoring methodology applied
to all issues and assets.
Users can track issues based on the scanner they
originated from within Ivanti Neurons for RBVM andASOC as well. And while those Ivanti solutions offer
intel on issues detected by scanners, Ivanti Neurons
for Vulnerability Knowledge Base (VULN KB) contains
details on all vulnerabilities and weaknesses. This
information enables organizations to understand what’s
going on globally, like which vulnerabilities are trending.

Better Together: Vulnerability Scanners & Ivanti Risk-Based Solutions 2

Prioritization
Vulnerability Scanners

Ivanti Risk-Based Solutions

Organizations also have the option to prioritize

Scanners make it difficult to determine if threats likeA dashboard revealing an organization’s exposure tooffers countless ways for users to pinpoint assets andransomware are present in an organization’svulnerabilities being exploited directly and indirectly byfindings in need of attention, from proprietary risk

environment. Achieving that level of visibility in aransomware comes standard in Ivanti Neurons forscoring to asset criticality.

scanner usually requires customers to write scripts or

RBVM and ASOC. Readymade views let users filter

apply a multitude of filters.

assets and findings for those impacted by ransomware

vulnerabilities based on their specific criteria. Ivanti

and other threats as well.
Further, scanners don’t typically offer insight on how
they determine the severity levels they assign toIvanti is the only organization that offers such quick

vulnerabilities. If 100 different vulnerabilities in anand easy ransomware visibility. Beyond ransomware,organization’s environment are marked as critical, theour tools also identify remote code execution (RCE),organization must treat all 100 the same, even if only

privilege escalation (PE), and trending and active

one is tied to ransomware or some other type of threat.

vulnerabilities to further aid vulnerability prioritization.

19%

increase in the countof ransomware
vulnerabilities
in 20222

Better Together: Vulnerability Scanners & Ivanti Risk-Based Solutions 3

Workflow Routing
Vulnerability Scanners

Ivanti Risk-Based Solutions

When a vulnerability requires attention, it must beIvanti Neurons for RBVM and ASOC aggregate data

routed to the proper personnel. Complex routing isfrom all an organization’s scanners into a single

common in modern enterprises. Infrastructure, DevOps

system. When a vulnerability in need of attention isand SAST/DAST tickets all go to different ticketing

identified by Ivanti’s risk-based solutions, users cansystems used by the different teams that own

quickly open a ticket in the proper external ticketing

remediation in those areas – IT, development and so on.

system from within the Ivanti user interface.

The ability to organize and route these tickets

Bidirectional integrations with ticketing systems

automatically is typically not found in scanners. Only

ensure data consistency. When a ticket is updated inorganizations that can scan for vulnerabilities, prioritize

either the Ivanti system or the ticketing system, thethem, route tickets, create audit logs and more using astate is accurately reflected in both.

homogeneous set of tools from a single vendor areimmune to the issue – if such a vendor even exists.

Ticketing Systems

InputScanners

Finding Prioritization

Ticket Creation

for ITSM

OSS/OSAWorkflows
SASTDAST

SLA

Better Together: Vulnerability Scanners & Ivanti Risk-Based Solutions 4

Automation
Vulnerability Scanners
Organizing assets and responsible parties and assigning due dates based on
adopted policies are tasks that must be completed manually at organizations withheterogeneous vulnerability management tech stacks. Further, users in suchsituations must do so multiple times across multiple tools.
These and other administrative tasks keep security analysts from focusing on
remediation efforts.

Ivanti Risk-Based Solutions
Playbooks in Ivanti Neurons for RBVM and ASOC enable the automation of commonor repetitive tasks so users can focus time and effort on remediation actions ratherthan administration. These automated playbooks run on a continual basis and canorganize assets into groups or tags.
Service-level agreement (SLA) automations in Ivanti’s risk-based solutions
auto-assign due dates to findings. Due dates are based on criteria specified by theorganization, such as VRR, asset criticality, and date of finding discovery.
And with all your scanner data in the same system, you only need to configure these
automations in one spot. You also benefit from having uniform processes applied to allfindings and assets versus being bogged down by different processes in different tools.

53%of IT and security professionals
spend most their time organizing
and prioritizing vulnerabilities3

Better Together: Vulnerability Scanners & Ivanti Risk-Based Solutions 5

Reporting
Vulnerability Scanners
Siloed scanners make reporting a tedious task.
Running compliance reports across multiple scanners
for an audit period is extremely difficult when dealing
with disparate datasets.

Ivanti Risk-Based Solutions
A single source of truth is needed to achieve reliable
reporting. By aggregating and normalizing the data
generated by each of an organization’s scanners, Ivanti
Neurons for RBVM and ASOC provide one.
Ivanti’s risk-based solutions deliver time-based
information. Not only do they tell you what the current
state of your environment is, they can also tell you
what happened in a specific timeframe, such as anaudit period.
Also, with all their scanner data in the same system,
organizations set the same yardstick for their entire
environment. For example, they can view unified riskscoring for all issues and assets versus having to rely on
varied risk scoring methodologies in separate scanners.

Better Together: Vulnerability Scanners & Ivanti Risk-Based Solutions 6

About Ivanti
Ivanti elevates and secures Everywhere Work so thatpeople and organizations can thrive. We maketechnology work for people, not the other way around.
Today’s employees use a wide range of corporate andpersonal devices to access IT applications and dataover multiple networks to stay productive, whereverivanti.com
1 800 982 2130
sales@ivanti.com

and however they work. Ivanti is the only technology
company that finds, manages and protects every IT
asset and endpoint in an organization. Over 40,000
customers, including 88 of the Fortune 100, havechosen Ivanti to help them deliver an excellent digital
employee experience and improve IT and security teamproductivity and efficiency. At Ivanti, we strive tocreate an environment where all perspectives areheard, respected and valued and are committed to amore sustainable future for our customers, partners,employees and the planet. For more information, visit
www.ivanti.com and follow @GoIvanti.

Veracode. “State of Software Security (SOSS) Report Volume12”. https://www.veracode.com/state-of-software-securityreport
2. Cyber Security Works, Cyware, Ivanti, Securin. “2023 Spotlight
Report - Ransomware Through the Lens of Threat andVulnerability Management”. https://cybersecurityworks.com/
ransomware/
3. Ivanti. “Patch Management Challenges”. https://www.ivanti.
com/resources/v/doc/ivi/2634/712cff539c8a1.

Copyright © 2023, Ivanti. All rights reserved. IVI-2752