Gestvul

Vulnerability Management

 

General information

It manages the entire vulnerability life cycle

In large organizations with many assets and where the individuals responsible for these assets are distributed across different organizational units, the process of vulnerability management becomes a complex problem.

All this complexity is very difficult to manage without a vulnerability management system to automate and support the activities that are part of the vulnerability management cycle.

To meet this challenge, we at GMV have developed gestvul®, a management solution that supports the whole vulnerability lifecycle, from identification of the vulnerability to its closure.

Gestvul in data

Gestvul

It manages vulnerabilities of systems deployed in 21 countries in Europe and the Americas

Gestvul

Serving GMV's clients for the last 20 years

Gestvul

It manages hundreds of thousands of vulnerabilities present in thousands of assets

Characteristics

Key features

What does Gestvul offer you?
  • Import of various vulnerability analysis tools (VATs) and consolidation of their results. The solution can uncover both vulnerabilities exploitable from the Internet and internal vulnerabilities. It currently supports Nessus, Qualys, Nexpose, OpenVAS, nmap and Checkmarx
  • Ability to manage vulnerabilities of isolated systems by importing the results of scans performed on these networks.
  • Access to information based on profiles and permissions. Each user only sees information about vulnerabilities affecting their own systems.
  • Grouping of information based on different criteria, which can be chosen by the user: geographic location, organizational structure, technology, etc.
  • Customizable dashboards.
  • Support for the management of false positives and unresolvable vulnerabilities.
  • Integration of results obtained automatically and manually, e.g. by way of penetration testing.
  • Optional module of passive detection of vulnerabilities which provides a preliminary view of the company's security status without scanning. The solution can integrate these results with those provided by the tools and thus determine whether a vulnerability has been detected actively, passively or by both methods. 
Features
  • SCALABLE: Prepared for a large volume of assets with a high number of

           managers involved.

  • GLOBAL: Manages both: infrastructure and application vulnerabilities.

  • MULTISCANNER: Interface with scanner applications for analysis and

          consolidation of results.

  • FLEXIBLE: Third-party tools (checkmarx, nessus, etc) and manual

          (i.e pentest) vulnerabilities and findings import.

  • MULTIUSER: Role based access – profiles and permissions customization.

Vulnerabilities management process
Deployment
  • Data storage at GMV
  • Admits external network scans – imported via file to Gestvul
  • Internal scans can be performed by GMV
  • GMV maintenance and operation
  • Data storage in customer premises
  • Scans and data import performed by GMV
  • GMV maintenance and operation
  • Data storage in customer premises
  • Scans and data import performed by customer
  • Maintenance and operation done by customer
  • GMV support