Squad1 - VM
Vulnerability Management

For all vulnerability feeds, Squad1 does cyber risk quantification. Risk scores are calculated for each discovered vulnerability based on multiple asset business intelligence and public vulnerability scores. Each vulnerability is prioritized using a risk score, then mapped to the organization's own mitigation SLAs.

Once a vulnerability has been identified by scanners and pen test teams, the technology team's primary goal is to decrease vulnerability exposure by making quick judgments and implementing faster mitigations. 

It manages the entire IT Asset inventory from one spot, allowing us to keep track of owners, departments, locations, environments, and custom labeling. Inventory is separated, and asset classification aids management for both infrastructure and application teams. Patching validations can be performed by direct scans from business owners' screens, based on role-based access. Inventory management's vulnerability and compliance views assist the company's cyber security objectives.

Squad1 has over 15 connectors and standard XML uploads from industry-standard software. Vulnerability scanners, application scanning (DAST), source code scanning (SAST), Container Security, Cloud Security, Ticketing Notification tools, and CMDB management solutions are all part of the tool stack. Squad1 connects to products that provide ready-to-use open APIs, allowing security teams to upload XML or pen-test data. All of the findings are normalized in a similar layout, with the option to append POC screen views, making it easier for the IT team to understand and collaborate.