VulnTriage

VulnTriage is a web app (with optional lightweight desktop agent) for vulnerability management teams drowning in scanner output. It ingests findings from common tools (e.g., Tenable, Qualys, Rapid7) plus cloud posture sources, then normalizes, deduplicates, and groups them into “fix packages” that map to the same root cause (single patch, config change, library upgrade, or image rebuild). It adds context like asset criticality, internet exposure, exploit maturity, and ownership to produce a realistic, defensible remediation order. The AI layer drafts remediation tickets, suggests the lowest-risk fix path, and flags likely false positives based on historical outcomes—but keeps humans in control with transparent scoring and audit trails. The goal is not another scanner; it’s a workflow engine that turns messy vulnerability data into actionable, trackable work for IT and engineering teams.