My comments on Forrester’s “Vulnerability Management vendor landscape 2017”. A top consulting company, Forrester Research, recently published report “Vendor Landscape: Vulnerability Management, 2017“. You can read for free by filling a small form on Tenable web site.

What’s interesting in this document? First of all, Josh Zelonis and co-authors presented their version of VM products evolution. It consists of this steps (I have reformulated them a bit for the copyright reasons) :
- Initial fear of automated vulnerability assessment tools
- Mid-1990s and first productized offerings
- Authenticated scanning dramatically improved accuracy of scans
- Application scanning (DAST)
- Security assessment of software containers and DevOps in general.
As you see, the last one is about containerization. And it is now presented only in Tenable.io/FlawCheck. 😉
Continue reading →