Vulnerability management tools can automatically scan IT resources for vulnerabilities - weaknesses that can expose a resource to a cyberattack. Most tools also prioritize vulnerabilities, helping the organization understand which vulnerabilities pose the greatest risk to the business if they are exploited. They also suggest remediation activities, instructing IT teams and developers how to fix the vulnerability or mitigate the security issue.
Vulnerability management tools are a preventive security measure. They can help remediate underlying issues that could be exploited as an attack vector. These tools are complemented by runtime security tools like host intrusion prevention systems (HIPS) or anti-malware software, which can block attacks when they occur, as well as cloud security posture management (CSPM) that helps harden the cloud infrastructure where the software is run.
Some vulnerability management tools scan a network to detect connected resources and identify associated vulnerabilities. Other tools scan application binaries, source code, or open source components included within the applications.