Gartner发布漏洞评估市场指南
需积分: 5 25 浏览量
2023-09-22
11:27:26
上传
评论
收藏 786KB PDF 举报
Gartner, Inc. | G00755176
Page 1 of 17
Market Guide for Vulnerability Assessment
Published 7 August 2023 - ID G00755176 - 23 min read
By Analyst(s): Mitchell Schneider, Craig Lawson, Jonathan Nunez
Initiatives: Security Operations
Vulnerability management remains a critical security operations
activity that helps organizations identify assets, mitigate threats
and meet compliance mandates. Security and risk management
leaders can use this guide to understand VA technologies as part
of a broader exposure management program.
Overview
Key Findings
Recommendations
Security and risk management leaders responsible for security operations who are
selecting and operating VA solutions must:
Vulnerability assessment (VA) technology buyers have evolved from tools that only
identified vulnerabilities to those that also proactively assess, manage and report the
risks posed by those weaknesses.
■
The majority of leading VA vendors have added external attack surface management
(EASM) capabilities either organically or through acquisition.
■
The dominance of point solutions for vulnerability prioritization still persists, and in
many cases can provide better functionality than what is built-in to existing VA
solutions.
■
VA vendors face increasing competitions from cybersecurity validation products,
such as breach and attack simulation and automated penetration testing. Enterprise
VA vendors are also integrating VA with these validation approaches.
■
Evaluate VA solutions’ capabilities for assessment coverage and depth, and support
of stand-alone product integrations to fill in the gaps across the vulnerability life
cycle, and to assist in remediation automation.
■
This research note is restricted to the personal use of [email protected].
剩余19页未读，继续阅读
资源评论
