Vulnerability Hub
Prioritize What Matters, Fix What Counts.
Track every technical exposure from open to resolved. Log a finding by hand, or import the export your scanner produced (Nessus, OpenVAS, Qualys, Defender, SARIF or Trivy), and work the list in CVSS order. Nothing here scans your systems.
What it does
Affected Assets
Record each vulnerability with the assets you list as affected. You name the assets; nothing matches them against your asset register or scores them for you.
CVSS-Sorted Triage
Vulnerabilities are sorted by their CVSS score, the one you enter or the one your scanner reported, with a remediation deadline per item. Sherlock-6 (AGT-06) narrates the resulting list; nothing discovers or scores a vulnerability for you.
Scanner Import
Upload the file your scanner produced. Each finding keeps the scanner's own score and hosts; a row with no score is skipped and listed, never given one, and uploading the same scan again skips what is still open.
Why it matters
- One list for the findings from every scanner you run and the ones you log by hand.
- Lifecycle tracking from open to resolved, with a remediation deadline per finding.
- Direct integration with existing patching pipelines is on our roadmap, not yet built.