# Vulnerability management | Precursor Intelligence **See the known flaws in the software you run. Only yours, riskiest first.** > Vulnerability management tells you which published security flaws affect the software your business actually uses, and which to fix first. You list your software, or let us read it from your website, and we match it against every known flaw. It suits small businesses with one IT person as well as security teams. Canonical page: https://www.precursorintelligence.com/features/vulnerability-management Breadcrumb: [Home](https://www.precursorintelligence.com/) > [Features](https://www.precursorintelligence.com/features) > Vulnerability management Start free: https://www.precursorintelligence.com/register · Book a demo: https://www.precursorintelligence.com/contact Only the flaws in your software. Monitored continuously. Nothing to install. Example data on this page uses the fictional company Acme (acme.co.uk). Acme tracks 12 products, which match 38 known flaws: 3 Critical, 3 High, 21 Medium and 11 Low or Info. The top of its list includes CVE-2024-38475 (web server, risk score 89.8, Critical, Emergency patch), CVE-2024-4577 (website scripting engine, 89.5), CVE-2024-3400 (VPN gateway, 89.0), CVE-2024-36404 (mapping library, 71.4, High) and CVE-2024-6387 (secure shell server, 70.6, High). ## Contents 1. [What does it cover?](#what-does-it-cover) 2. [How do you tell us what you run?](#how-do-you-tell-us-what-you-run) 3. [How does it work?](#how-does-it-work) 4. [Which flaws affect you?](#which-flaws-affect-you) 5. [Already run a scanner?](#already-run-a-scanner) 6. [Questions](#questions) 7. [Related features](#related-features) ## What does it cover? Everything starts with the list of software you run. From that one list we build your own ranked set of flaws, keep it scored and tell you when it changes. 1. **Your software list.** The products and versions you run, picked from a catalogue of over 181,000 products or found on your website. 2. **Matching.** Each tracked product is checked against every published flaw, so you only see the ones that apply to you. 3. **A ranked list.** Your matched flaws, ordered by a 0 to 100 risk score that we keep up to date. See [risk-based prioritisation](https://www.precursorintelligence.com/features/risk-based-prioritisation). 4. **Clear bands.** Critical, High, Medium, Low or Info on every flaw. Anything confirmed exploited is marked "Emergency patch". 5. **Alerts as soon as we know.** We keep watching for new, newly exploited and rising flaws in your software, and tell you by email, in the app or by webhook. See [alerts and reporting](https://www.precursorintelligence.com/features/alerts-and-reporting). 6. **Keyword rules.** Catch flaws by text, such as a product and a version together, alongside your tracked software. 7. **Scanner import.** Sync findings from Tenable Vulnerability Management, or upload a results file from eight common scanners. 8. **Risk register PDF.** Export your matched vulnerabilities as a PDF to share with your team or your board. 9. **AI action plans.** Turn your top risks into a written plan of what to fix and in what order. See [AI action plans](https://www.precursorintelligence.com/features/ai-action-plans). 10. **API and AI assistants.** Read your vulnerabilities through the REST API or ask an AI assistant through our MCP server. See [MCP server](https://www.precursorintelligence.com/features/mcp-server). ## How do you tell us what you run? **Tracked software. Two ways in; use both.** Most businesses run a mix: a public website, plus systems staff use inside the office. - **Let us read it from your website.** We identify the software running behind your public site in roughly 5 to 30 seconds, and you review the list before anything is saved. - **Pick it from a catalogue** of 37,460 vendors and 181,186 products, down to the version you run. Best for systems that are not on the web. - **We only see what is public.** Website detection cannot see anything behind a login, which is why the catalogue is there too. ## How does it work? There is no agent to install and nothing to connect to your network. You tell us what you run, in one of two ways, and the rest happens on our side. 1. **Tell us what you run (once, then whenever it changes).** Let us read your public website, or pick products and versions from the catalogue. You review detected software before it is saved. 2. **We match it (on our side).** Each product you track is checked against every published flaw. The matches become your organisation's vulnerability list. 3. **Your list is ranked (continuously).** We keep every flaw scored from 0 to 100, so your list stays in order: riskiest first. 4. **You hear about changes (as soon as we know, by email or webhook).** We tell you about new or newly exploited flaws in your software. Turn the top of the list into a written plan whenever you need one. ## Which flaws affect you? **Out of over 400,000.** Over 400,000 security flaws have been published. Almost none of them matter to you. We match the products and versions you track against all of them and keep only the ones that apply. - **Matched to your versions.** Each tracked product is checked against the catalogue of known flaws, and the matches become your organisation's list. - **Ranked by a 0 to 100 risk score,** kept up to date, so the riskiest flaw is always at the top. - **We keep watching** and tell you as soon as we spot newly published flaws, newly known-exploited ones and ones whose exploit likelihood is rising, in the software you track. - **Keyword rules** catch flaws by text, such as a product name and a version together. Example: Acme tracks Exim 4.96, a mail server. It matches CVE-2023-42116, a mail server flaw that affects that version, with a risk score of 56.2 (Medium). ## Already run a scanner? **Bring its findings in.** If your team already runs a vulnerability scanner, connect it or upload its results, and the findings are matched to our intelligence alongside your tracked software. - **Tenable Vulnerability Management sync.** Connect your Tenable API keys. We verify them, encrypt them and keep your findings in sync, with a pull on demand whenever you like. - **Upload a scan file** from Nessus, Rapid7 Nexpose or InsightVM, Nikto, Nmap (XML), OpenVAS or Greenbone (CSV), Qualys VM, Qualys WAS or OWASP ZAP, up to 50 MB. - **Tenable is the only scanner we sync with.** For anything else on that list, upload the export. Webhooks, the REST API and every other connection: [integrations](https://www.precursorintelligence.com/features/integrations). ## Questions ### Is this vulnerability management for small businesses? Yes. You do not need a scanner or a security team to start. List the software you run, or let us read it from your website, and you get a ranked list of the known flaws that affect it. Larger teams can bring in their scanner results too. ### Do I need to install anything? No. It runs in your web browser. You tell us what software you use, either by picking it from a catalogue or by letting us detect it from your public website, and the matching happens on our side. ### How do you know which flaws affect me? We match each product and version you track against every published flaw. The matches become your list, and each one gets a 0 to 100 risk score that we keep up to date, riskiest first. ### Can I import results from my existing scanner? Yes. You can connect Tenable Vulnerability Management, which we keep in sync and you can pull on demand, or upload a results file from Nessus, Rapid7 Nexpose or InsightVM, Nikto, Nmap, OpenVAS or Greenbone, Qualys VM, Qualys WAS or OWASP ZAP, up to 50 MB. Tenable is the only scanner we sync with directly. ### Will you tell me when a new flaw affects me? Yes. We monitor continuously for newly published flaws, newly known-exploited ones and ones whose exploit likelihood is rising, in the software you track, and tell you as soon as we spot one. Alerts go by email, to the bell in the app or to your own tools by webhook. ### How is this different from an attack surface scan? Vulnerability management watches the software you tell us you run, including systems inside your office. An attack surface scan looks at your domain from the outside to find what is exposed to the internet. Neither is a penetration test. ## Related features - [Risk-based prioritisation](https://www.precursorintelligence.com/features/risk-based-prioritisation): every known flaw scored from 0 to 100 and kept up to date, so you fix the riskiest first. - [AI action plans](https://www.precursorintelligence.com/features/ai-action-plans): a written, prioritised fix plan for your top risks, step by step. - [Attack surface management](https://www.precursorintelligence.com/features/attack-surface-management): map everything of yours that anyone online can reach. - [Alerts and reporting](https://www.precursorintelligence.com/features/alerts-and-reporting): alerts by email, in the app or by webhook as soon as we spot something, plus PDF reports. - [All features](https://www.precursorintelligence.com/features) ## Know which flaws affect you. And which to fix first. Tell us what you run, or let us read it from your website, and see only the known flaws that affect it, ranked riskiest first and kept up to date as new ones appear. [Start free](https://www.precursorintelligence.com/register) · [Book a demo](https://www.precursorintelligence.com/contact)