Cisco Vulnerability Management

Kenna Security provides a risk‑based vulnerability management platform that aggregates data from scanners, asset inventories, and threat‑intel feeds to generate a contextual risk score for each finding. The platform delivers prioritized remediation recommendations through dashboards and automated ticketing integrations, enabling security teams to focus on the most critical exposures.

Traction 4/10

San Jose, United States · HQ

Founded 1984

Updated 2 days ago

Funding

Funding not disclosed

Funding rounds are not available yet.

Founders

1 founder

Chuck Robbins

Chair and CEO

Product

Problem

Enterprises generate thousands of vulnerability findings from scanners and asset tools, but limited security staffing and budget make it difficult to determine which flaws pose the greatest risk. Without a systematic way to prioritize, critical exposures can remain unaddressed while low‑impact issues consume remediation effort.

Solution

Kenna Security (formerly Kenna.VM) delivers a risk‑based vulnerability management platform that ranks findings using advanced data‑science models and real‑world threat intelligence. The system ingests data from vulnerability scanners, asset inventories, and external exploit feeds, then calculates a contextual risk score that reflects exploitability, asset criticality, and exposure likelihood. Prioritized remediation recommendations are presented through interactive dashboards and can be pushed automatically into ticketing or patch‑management systems via APIs. Continuous monitoring updates scores as new threats emerge, enabling security teams to focus resources on the most damaging vulnerabilities and thereby lower the organization’s overall risk posture.

Target Audience

The primary users are security operations centers, vulnerability management teams, and IT administrators in mid‑size to large enterprises that need to prioritize and remediate vulnerabilities efficiently.

Features

Data‑science scoring engine that combines CVSS, exploit‑availability, and asset‑importance metrics into a single risk score
Real‑time integration of threat‑intel feeds (e.g., Talos, public exploit databases) to adjust scores based on emerging exploits
Automated aggregation from multiple scanners and CMDBs via native connectors and RESTful APIs
Workflow orchestration that creates tickets in ServiceNow, Jira, or other ITSM tools and tracks remediation status
Interactive risk‑visualization dashboards with trend analytics, heat maps, and compliance reporting
Role‑based access control and audit logging to meet enterprise governance and regulatory requirements