Issues

Vulmon Recon flags security problems on your in-scope assets through non-intrusive reconnaissance — fingerprinting and matching against known issues, never running exploits.

The left nav splits findings by type:

• Vulnerable techs — CVEs matched to the products and versions detected on your assets, grouped by product and version.
• Misconfigurations — exposure problems such as directory listing, missing security headers, server version disclosure, and HTTP that doesn't redirect to HTTPS.

Both pages also carry CVE directory and Asset directory tabs, for browsing the same findings by CVE or by host.

Findings are ordered by CVSS severity and by two exploitation signals: whether the CVE is on CISA's KEV list of known-exploited vulnerabilities, and its EPSS probability of being exploited in the next 30 days. You triage by endpoint rather than one finding at a time, and can ask the scanner to re-verify an endpoint instead of waiting for the next scan.

Work that belongs to someone else can leave the product: push a finding to Jira, ServiceNow or GitHub Issues as a ticket, and its assignee there takes over from the asset's own owners. See notifications and integrations.