Vulnerability discovery

In addition to asset inventory and management, Enclave also provides vulnerability discovery. Enclave uses the National Vulnerability Database (NVD) from NIST for vulnerability discovery. Scanning takes place one an hour and will scan all inventoried software for vulnerabilities.

Please contact us to enable vulnerability discovery for your organization.

How it works?

Our vulnerability discovery constantly polls the NVD for new vulnerabilities. When a new vulnerability is found, we will scan all of your software for the vulnerability. If a vulnerability is found, it will be displayed in the EMC.

Ignoring CVEs

You can ignore CVEs by clicking the ignore button on the vulnerability. Ignored vulnerabilities will not be displayed in the EMC. You can view ignored vulnerabilities by filtering them in the Vulnerability Explorer by ignored. Please note that when ignoring CVEs, it will take until the next scan time for the vulnerability to be removed as active in software and dashboards. It will be immediately be ignored from the asset iteself.

Acknowledgements

• NVD: This product uses the NVD API but is not endorsed or certified by the NVD.
• EPSS: See EPSS at https://www.first.org/epss