Skip to content
ITSecureOps

Endpoint & Threat Security

Vulnerability Management software

Scanners and platforms that find, prioritise and track remediation of vulnerabilities across your estate.

Vendors to know
10
Reviews
0
Comparisons
0
Guides and articles
0
Build a shortlistSee vendors

Vulnerability Management vendors to know

Established leaders, challengers, newer entrants and the tools practitioners recommend to each other. Being listed is not a ranking or an endorsement, and no vendor paid to appear.

  • Tenable One

    Established leader

    Ranked

    Official site

  • Qualys VMDR

    Established leader

    Combines scanning, prioritization and response; added an agentic AI exploit-validation agent (Agent Val) to its platform in March 2026.

    Official site

  • Wiz

    Wiz (Google Cloud)

    Established leader

    Cloud-native CNAPP that folds vulnerability management into CSPM, CWPP and container security; rated 4.7/5 on G2 across 772+ reviews.

    Official site

  • Rapid7 InsightVM

    Challenger

    Longtime vulnerability management platform (4.4/5 on G2) now facing pressure from platform bundlers; Rapid7's market cap fell sharply in 2026.

    Official site

  • CrowdStrike Falcon Exposure Management

    Challenger

    Bundles vulnerability and exposure management into the Falcon EDR platform, part of a 2026 trend of security giants folding VM into broader suites.

    Official site

  • Microsoft Defender Vulnerability Management

    Challenger

    Vulnerability assessment and remediation tracking bundled with Microsoft Defender for Endpoint, a default option for Microsoft-centric IT teams.

    Official site

  • Holm Security

    Emerging

    Unified vulnerability management covering network, cloud, web app and phishing-risk exposure, positioned for mid-market European buyers.

    Official site

  • Intruder

    Emerging

    Continuous external attack surface scanning with plain-language remediation advice, popular with lean security teams and SMBs.

    Official site

  • Nucleus Security

    Emerging

    Vulnerability and exposure management platform focused on aggregating and prioritizing findings across multiple existing scanners.

    Official site

  • Greenbone (OpenVAS)

    Greenbone Networks

    Community favourite

    Open-source vulnerability scanning framework (GVM/OpenVAS) under GPL, a recurring free self-hosted pick alongside commercial scanners.

    Official site

Reviews for this category are in progress.