01 · Operations · Start here
Building VulnOps: From Vulnerability Detection to Remediation
The vulnerability scanner was doing its job. Our remediation process was not. This is why I built something different.
Read the article →Security Engineering Blog
Stories from the sharp end of security engineering.
Vulnerability reports are easy to produce. Fixing the underlying problems without breaking production is the interesting part. Six articles from building VulnOps and working through the awkward bits of security operations.
-
02 · Threat intelligence
Prioritising Vulnerabilities Using CVSS and Exploit Intelligence
A ten on a spreadsheet does not always mean a ten in your environment. Context changed how I prioritise risk.
-
03 · Automation
Automating Windows Security Remediation Using PowerShell
The scripts were the easy part. Making them safe to run on real machines was the difficult lesson.
-
04 · Resilience
Designing Rollback Mechanisms for Vulnerability Remediation
I learned the hard way that a successful security change can still cause a disastrous day.
-
05 · Architecture
Multi-Tenant Security and Role-Based Access Control
Supporting multiple clients is useful. Accidentally crossing their boundaries is unacceptable.
-
06 · Verification
Validating Vulnerability Remediation Using Tenable and Endpoint Telemetry
I have watched patches succeed and vulnerability counts refuse to move. Here is what verification really means.
-
Written by
Praneethraj
Security engineer and creator of VulnOps. I write about the real work behind vulnerability management, from fixing confusing Windows findings to making remediation safer and easier to prove.
AboutRSS feedLinkedIn ↗