TVM

Threat and Vulnerability Management Platform

Integrates cloud threat intelligence with traditional scanning capabilities

Full lifecycle vulnerability operations

Identifies critical risks, accelerates remediation and improves operational efficiency

NSFOCUS TVM provides full lifecycle vulnerability operations, including asset discovery, exposure analysis, risk prioritization, remediation guidance, and continuous monitoring. By correlating multi-source data and focusing on real-world exploitability, the platform helps organizations identify critical risks, accelerate remediation and improve operational efficiency.

Customer Value

 

Improved vulnerability operation capabilities

Vulnerability prioritize, mitigation process tracking, operation indicator visibility.

Improved vulnerability O&M efficiency

Centralized management scanning tools, unified analysis of multi-source vulnerabilities.

Improved asset management capabilities

Comprehensive and continues asset discovery and management, for Attack Surface Management.

Functions

  • Threat-prioritized vulnerability management, redefine vulnerability priorities using threat intelligence.
  • Intelligence-driven emergency response: Real time intelligence drives vulnerability alarm towards specific assets.
  • Continuous monitoring of attack surface includes adding, removal and change of assets.
  • Full visibility and control of vulnerability management lifecycle: integrated with vulnerability early warning, scan, disposal, asset auditing and priority analysis.

Highlights

Threat Intelligence

 

  • Driven by the NSFOCUS Threat Intelligence (NTI) Center, emergency vulnerabilities can be noticed in the first minute for emergency response.
Innovative VPT

 

  • Based on threat factors (popularity, POC, malware) and asset factors (importance, level, protection status) to define vulnerability disposal priorities.
Multi-source vulnerability integration

 

  • Unified integration and analysis of 3rd party vulnerability sources include scan results, penetration test results, 3rd party vendor advisories, and threat intelligence feeds.