Tenable®, Inc., the Cyber Exposure Company, today delared new Predictive Prioritization capabilities within Tenable.io® and Tenable.sc™, for vulnerability management in the cloud and on-premises, that quicken the discovery, prioritization and remediation of vulnerabilities before they are published in the National Vulnerability Database (NVD).
Depending on the issuing software vendor, a significant lag may exist between when vulnerability is publicly announced and when it appears in the NVD. Besides, organizations often depend on the NVD’s seriousness rating to prioritize remediation efforts. This delay creates a Cyber Exposure hole where security teams are precisely recognize which new vulnerabilities represent the greatest risk to the business.
Tenable’s Cyber Exposure platform presently addresses this issue via consequently prioritizing vulnerabilities prior to publication in the NVD, ultimately reducing lag and accelerating remediation time. The company’s ground-breaking Predictive Prioritization innovation analyzes Tenable vulnerability data combined with third-party vulnerability data, threat intelligence and vendor security advisories using data science to predict the likelihood a vulnerability will be exploited in the near future. The resulting Vulnerability Priority Rating (VPR) indicates the remediation priority of each flaw and provides organizations with a head start in reducing their exposure to cyber risk. Furthermore, VPR scores are dynamic and change with the threat landscape, arming security teams with actionable insight into their true level of business risk.
“The lag time between when vulnerability is first uncovered and when it’s distributed in the NVD restrains an organization’s capacity to manage its exposure with risk-based metrics,” said Renaud Deraison, CTO, Tenable. “The most recent functionality in Predictive Prioritization gives security teams a head start in reducing their organization’s cyber exposure, providing them with actionable insight needed to focus on the vulnerabilities that matter most.”
Predictive Prioritization with the new pre-NVD ratings is available for both Tenable.io and Tenable.sc (formerly SecurityCenter).
For more information about the latest capabilities, visit www.tenable.com/predictive-prioritization or sign-up for a trial by visiting https://www.tenable.com/try.