Workflow
From scanner to ticket: the Vendrsec workflow
A step-by-step walkthrough of how Vendrsec correlates findings, scores business risk, and generates actionable remediation output.
Ingest — your scanner finds it, Vendrsec receives it
API integration with your existing scanners. No agents, no new sensors. Vendrsec reads the same findings your team already has — it just processes them differently. Qualys, Tenable, Crowdstrike Falcon Spotlight, Wiz, and Rapid7 InsightVM are all supported natively. New findings appear in Vendrsec within minutes of your scanner completing a run.
Correlate — map each finding to your business context
Vendrsec loads your asset inventory and business function tags. It builds a network reachability graph and queries exploit intel APIs. Each finding gets enriched: Is this asset internet-facing? Business-critical? Is this CVE actively exploited? Is it in CISA KEV? Are there known exploit kits in circulation? These questions reorder a raw CVE list into a risk-ranked view of your actual exposure.
Score — Vendrsec Risk Score replaces the prioritization meeting
A composite score 0–100 weighting asset criticality, reachability, and exploit activity. The top 1% of findings by Vendrsec Risk Score are your actual remediation queue. CVSS remains visible for every finding — it becomes one input among four, not the deciding factor. The score updates automatically when new exploit intelligence arrives, when your asset inventory changes, or when your scanner finds new exposure.
Ticket — structured remediation artifact, auto-generated
One click pushes a complete remediation ticket to Jira, Linear, or ServiceNow. Fields pre-populated: asset FQDN and IP, CVE identifier and description, specific fix instruction (patch version, configuration change, or compensating control), assigned owner based on asset ownership tags, SLA deadline set by severity tier. Engineers receive a ticket that tells them exactly what to do — not a link to the NVD entry they already looked up.
Track — posture drift score over time
As findings close and new scans run, your Vendrsec Posture Score updates. Weekly trend shows whether your exposure is growing or shrinking — and exactly what drove each change. Remediated Log4Shell cluster? The score moves. New scan uncovered 847 findings? The score moves. You see the cause and the delta, not just a dashboard number.