The Vulnerabilities page is beneficial in providing a high-level overview of the detected, remediated, or ignored vulnerabilities on your servers and containers.
Vanta can pull data from the following vulnerability scanners for servers and containers:
13 Penetration Testing & Scanning
Aikido Security
AWS ECR (Elastic Container Registry)
AWS Inspector
Azure Containers
Azure Defender for Containers and Virtual Machines
Cacilian Pentest and Scanner
Coana
Crowdstrike
Darkspot by Contxt
DeepSource
EdgeBit Security
GCP GCR (Google Artifact Registry)
Github Dependabot
GitLab
Heyhack
Lacework
Lumenova AI
Microsoft Defender for Endpoint
Orca Security
Prancer
Qualys
SentinelOne
Snyk
Socket Security
SOOS Security Analysis
Tenable
Page tabs
Findings by asset
Security vulnerabilities found on individual assets
Finding by vulnerability
all found vulnerabilities
Deactivated
vulnerabilities that have been ignored
History
SLA misses & on-time remediations
Settings
SLA settings and available integrations (accessed via Settings in the account header, then scroll to the Features section and select Assets)
Findings by vulnerability
Identifier
Source
CVEs
A known vulnerability with an assigned CVE ID number
CVE severity
Score assigned around how detrimental a breach of this vulnerability would be to your organization
Assets
The number of assets the vulnerability is found on
Due date
When remediation should be completed by as defined by SLAs
First Seen/Last Seen
Available Fix
Is a remediation or patch available for the vulnerability
​
đź“– Learn more: How Vanta Calculates Vulnerability SLAs
Visual information
From the Findings by asset page, you will see
Asset scan coverage by source
Asset SLA Status
From the Findings by Vulnerability page, you will see
Vulnerabilities by severity level
SLA tracking
Vulnerability settings
When vulnerabilities are detected within your infrastructure, ensure they are triaged and remediated on time through SLAs. You can create your own or use Vanta's recommendations.
đź“– Learn more: Managing SLAs