What is NeXpose?
NeXpose is a vulnerability assessment, policy compliance and remediation management solution that scans Web applications, databases, networks, operating systems, Lotus Notes applications and other software products to locate threats, assess their risk to the environment, and devise a remediation plan. Designed to minimize the time spent eliminating an organization’s security vulnerabilities, NeXpose provides comprehensive vulnerability management and risk reporting at an optimal cost, allowing broad asset protection for a minimum investment. Performing over 30,000 vulnerability checks against 1,500 devices, NeXpose provides unsurpassed coverage of your entire network, helping organizations significantly reduce security risks and confidently protect valuable digital assets.
A Unified Vulnerability Management Approach
NeXpose combines the following into one unified product to enable non-stop, flexible protection from network security threats:
- Vulnerability management - scan your environment from both inside and outside the firewall to find exposures that can compromise your network
- Risk assessment - identify risk based upon how the vulnerability in one system affects another
- Policy and compliance reporting - determine if your systems comply with corporate or regulatory policies
- Remediation guidance - fix vulnerabilities quickly and easily with the information provided in remediation reports
- Accurate scanning - delivers accurate scanning results in less time with an expert system that follows an assessment process similar to that used by ethical hackers
- Automated ticketing - manages the remediation workflow process with an internal ticketing system to delegate remediation tasks to the analysts and administrators responsible for individual systems.
NeXpose audits Web applications, databases, operating systems, servers, and network devices from a single product. NeXpose, available as a software product, hardware appliance or a managed service, runs on Linux and Window platforms and self manages internal database, program and vulnerability library updates.
