"Know what you have, focus on what matters." That's our mantra.

While that usually directs people toward taking stock of their cyber assets, it also means that you should take stock of vulnerabilities and potential gaps in your security posture. Vulnerabilities leave businesses and individuals open to a range of threats including malware and account takeovers and impact workflows across developer, IT, and security teams. According to the National Vulnerability Database, there were 21,957 known vulnerabilities in 2021 and 8,185 in 2022 YTD.

Vulnerability scanning is crucial to maintaining an air-tight security program, but interpreting and understanding what they mean is key. Connecting these vulnerabilities with JupiterOne's cyber asset context makes it easier to prioritize and remediate those issues, which is why we've added these four new vulnerability management integrations into JupiterOne.

• Qualys
• Orca Security
• Snyk
• Veracode

Put Your Vulnerability Scan Results Into Context

Today's modern enterprises have unprecedented levels of diversity in their cyber asset portfolios. When thinking about your current vulnerability identification processes, there are most likely two data points you consider:

1. the assets you have
2. what is happening to them

But that is not enough. There is an often overlooked, maybe unknown, missing piece of information that lies in between these two data points: the context.

Cyber assets are never one dimensional. They form complex, overlapping, three dimensional relationships. So while vulnerability scanners are perfect for identifying and reporting on security gaps that accompany each asset, they are limited in their ability to help you understand the potential blast radius if a vulnerability were exploited.

JupiterOne vulnerability management integrations take error-prone, manual labor out of your security team's vulnerability scanning and patching processes. They automate detection, monitoring, and remediation of risks and attacks. By automating and centralizing the management and analysis of your cyber assets and security posture, you can get rid of siloed teams, point systems, and alert fatigue. JupiterOne helps you visualize your entire cyber asset universe, map asset relationships, and identify just how severe the blast radius could be.

Make the Most of Vulnerability Scanning with JupiterOne

Here are some examples of how customers use JupiterOne to elevate their current vulnerability scanning workflows:

• Maintain clean code: By continuously monitoring your code, open source dependencies, containers, and infrastructure, JupiterOne can create vulnerability alerts to keep your developers and security group up-to-date on when actions or changes are needed.
• Keep track of user access: Once vulnerabilities are discovered, developers typically work fast to release an update, or "patch." Get alerted on any critical code repository or application changes. JupiterOne continuously monitors access by ingesting metadata like account information, users, and roles to help you determine the right levels of access and maintain compliance controls.
• Pinpoint weaknesses across applications: With our available integrations, you can consolidate all pertinent data from your entire cyber asset ecosystem. Once a weakness is pinpointed, use JupiterOne's asset relationship mapping to easily identify the blast radius of a weakness across all applications.
• Cross reference findings from web apps to hosts: JupiterOne not only creates relationships between entities, but also connects with other JupiterOne integrations that have hosts such as AWS or Google Cloud. Visualize which hosts and web apps are being scanned or not scanned in order to understand where your gaps are.

To get the most out of JupiterOne, check out some of our existing integrations!

• Rumble
• Addigy
• Rapid7
• Cobalt

That's all for this round of updates! For more information about the latest integrations, visit the AskJ1 Community or our latest Product Documentation.