Qualys vs VulnCheck

About VulnCheck

VulnCheck sells a Cyber Threat Intelligence platform that provides exploit and vulnerability intelligence for prioritizing and remediating vulnerabilities. VulnCheck's platform supports prioritizing vulnerabilities based on the threat environment and deferring vulnerabilities that do not matter.^[5]

VulnCheck defines TTE (Time-to-Exploitation) as the gap between CVE disclosure and confirmed exploitation. VulnCheck also provides real-time alerting of changes in vulnerabilities, so that customers can take action before attacks start.^[5]

VulnCheck offers Exploit & Vulnerability Intelligence for decisions on which vulnerabilities need immediate remediation. VulnCheck provides early access to new vulnerability information not found in the NVD, along with dozens of unique fields. VulnCheck provides an exploitation timeline covering when a vulnerability was first disclosed, when evidence of exploitation was first discovered and when the vulnerability was remediated. VulnCheck directs remediation effort to vulnerabilities that are being actively exploited in the wild.^[5][15]

VulnCheck develops exploit PoCs, packet captures, and Suricata signatures in house to defend against initial access vulnerabilities. VulnCheck provides data from globally deployed Internet sensors that reveals the first signs of vulnerability exploitation. VulnCheck states that when it is given a CVE, it tells the customer every vulnerable host on the internet right now. VulnCheck for Government includes features, functionality and data available only to VulnCheck's Government partners.^{[5][7][8][16]}

VulnCheck's Initial Access Intelligence team has detailed an unauthenticated pre-auth remote root RCE chain in Control Web Panel. VulnCheck reports third party vulnerabilities.^[1][5][17]

The services are offered by VulnCheck Inc. VulnCheck grants customers a right to access and use the VulnCheck products and services specified in an Order Form. VulnCheck permits its service to be integrated only into customer products that provide substantial additional value independent from the service. Unless an Order Form says otherwise, VulnCheck invoices fees annually in advance, payable in U.S. dollars within thirty (30) days from the date of invoice. VulnCheck provides support, maintenance, and uptime for each service according to the support package selected on the Order Form. VulnCheck may provide upgrades, patches, enhancements, or fixes to its customers generally without additional charge.^{[1][4][5][6][7][8][9][10][11][18]}