1、Decoding Vulnerability Management:A Stand Alone Tool vs.a Technique in Endpoint ProtectionJon Amato 24 March 2023Gartner ResearchGartner:Decoding Vulnerability Management:A StandAlone Tool vs.a Technique in Endpoint Protection Published 24 March 2023-ID G00782165-13 min read By Analyst(s):Jon Amato

2、Initiatives:Security Operations for Technical Professionals;Meet Daily Cybersecurity Needs Vulnerability management capabilities are provided both by standalone VM platforms and as a feature by some prominent EPP platforms.Security and risk management technical professionals can use this research to

3、 select and use the right vulnerability management tool to satisfy their own needs.Additional Perspectives Invest Implications:Decoding Vulnerability Management:A Stand-Alone Tool vs.a Technique in Endpoint Protection(29 March 2023)Overview Key Findings An increasing number of endpoint protection pl

4、atform(EPP)tools are maturing toreport on the vulnerabilities of the assets.The vulnerabilities reported are thenprioritized and scored using risk-based prioritization techniques.Stand-alone vulnerability management(VM)tools and EPP tools with a VMtechnique use different scanning methodologies to di

5、scover vulnerabilities-standalone tools rely on periodic scans,while EPP tools use the continuous scanning orscanless methodology.Endpoint detection and response(EDR)tools with VM capabilities can potentiallyuse vulnerability data to prioritize alerts and provide additional risk context todetection

6、and response.These possibilities drive the inclusion of vulnerabilitymanagement capabilities.GartnelnIG00782165 Page 1 of 12 This research note is restricted to the personal use of .Gartner:Most of the EPP vendors supporting vulnerability management features are delivered from the cloud.While many E