The Death and Rebirth of Vulnerability Management (RSAC25)

Despite becoming a checkbox feature in major product suites, vulnerability management is fundamentally broken. The few remaining first-wave vulnerability scanners long ago shifted their investments and attention into adjacent markets to maintain growth, bolting on fragmented functionality that's added complexity without effectively securing today's attack surfaces. Meanwhile, security teams are left contending with massive blind spots and disparate tools that collectively fail to detect exposures that are commonly exploited by attackers. Our industry is ready for change.

Jeff Man and HD Moore explore the current state of vulnerability management, what’s required to truly prevent real-world incidents, new perspectives that are challenging the status quo, and innovative approaches that are finally overcoming decades old problems to usher in a new era of vulnerability management.

Segment Resources:

  • runZero offers a fully functional, free 21-day trial that converts into a free Community Edition license that is great for small environments and home networks.
  • Read more about runZero's recent launch, including new exposure management capabilities.
  • Watch a two-minute summary and deeper dive videos here
  • Tune into runZero's monthly research webcast, runZero Hour, to hear about the team's latest research findings and additional debate on all things exposure management.

Meet Our Speakers

HD Moore

Founder & CEO

Subscribe Now

Get the latest news and expert insights delivered in your inbox.

Welcome to the club! Your subscription to our newsletter is successful.


Related Resources

Podcasts
Is Vuln Management Dead?
HD Moore joins Paul's Security Weekly to share how vulnerability management and asset discovery are evolving in the age of emerging technologies....
Podcasts
Metasploit's Origin, Browser Bugs & Exposure Management
HD shares the story of building the top pen testing framework, early cybersecurity tales, and how his Month of Browser Bugs ended ActiveX.
Podcasts
From Vulnerability to Visibility: Rethinking Exposure Management
Learn how exposure management is evolving and how organizations can move from simply identifying vulnerabilities to gaining true visibility and...
Podcasts
Risky Biz Interview: HD Moore on why vuln scanners are awful and broken
Hear HD Moore on why vulnerability scanning is broken, and how runZero aims to fix it by pairing its discovery tech with the open-source Nuclei...

See Results in Minutes

See & secure your total attack surface. Even the unknowns & unmanageable.