What is our primary use case?
I am in a position where we govern VAPT and vulnerability management programs. My associates initiate quick scans of devices and all environments to identify vulnerabilities, which are then pushed back to the IT team and server owners for patching. I govern this vulnerability management program.
On network flow, my red teamers conduct regular assessments to identify whatever ports are available and open ports. If there is any application-related vulnerability available, an attacker may leverage it. They interact regularly in such scenarios.
What is most valuable?
We are using a couple of tools in terms of scanning and remediation. We leverage some of our in-house tools and some cloud tools, so we have a layered security architecture. Some tools work on the transport layer, some on the network layer, and some on the application layer. The team scans across those tool layers. Based on identifying gaps, they fulfill them.
Everything feels accurate to me. In today's landscape, we have so many threats and threat actors working around that may damage any available entities. The team scans and finds anything that appears immediately necessary to remediate. They follow the steps accordingly.
The team is working around the clock and doing their due diligence on their jobs.
What needs improvement?
There are so many challenges while running this vulnerability program. It is a very complex program where everyone has their own priorities related to running their business. When we pitch in and tell them that something is a priority, there may be big hurdles to remediate it. From an operational point of view, it is too difficult to manage, but it is a key component. We push them and take their confirmation and prioritization by asking every time. That is how we are operating.
For how long have I used the solution?
I have been familiar with VAPT services in my work for almost ten years.
What other advice do I have?
I did not use Redscan at all. I have used formal VAPT services in my SOC role. In terms of focusing on prioritization, zero-day vulnerabilities and high vulnerabilities are part of that. We engage them in the remediation of vulnerabilities and ask and share some justification or key aspects to remediate them. We process this current standard in terms of remediation. I provide this review with an overall rating of nine.
Which deployment model are you using for this solution?
On-premises
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
