A decade ago, we started Scalefusion with a simple idea: managing endpoints should be easier. Over the years, that idea has taken us from device management to a broader view of what it takes to secure and manage the modern endpoint.
Over the last three years, we have been building on that foundation from the security side. With Veltar, we have brought capabilities such as web security, device trust, compliance, and secure access closer to the endpoint. Each of these has been about addressing a different part of the security equation while keeping the endpoint at the center.
Vulnerability management often sits outside endpoint management. Vulnerabilities are discovered by security tools, while the endpoints affected by them are managed by IT. Between identifying a vulnerability and actually fixing it, teams often have to work across different tools, agents, and workflows. That disconnect can make it harder to maintain context and move quickly from exposure to remediation.
Which is why we’re excited to announce Veltar Vulnerability Management: vulnerability detection and remediation powered by Scalefusion UEM.
With this release, we bring vulnerability detection, risk assessment, prioritization, and remediation together across Veltar and Scalefusion UEM. IT and SecOps teams can discover vulnerabilities across managed Windows and macOS endpoints, understand their real-world risk, prioritize what needs attention, and remediate them through UEM patching.
It brings the vulnerability lifecycle closer to the endpoint, without requiring another vulnerability management agent or another console to manage.
From exposure to resolution
Veltar Vulnerability Management connects every stage of the vulnerability management lifecycle, enabling IT and security teams to:
- Discover vulnerabilities across OS components and third-party applications.
- Assess their severity, exploitability, threat activity, and endpoint impact.
- Prioritize remediation using risk score and threat intelligence
- Remediate vulnerable endpoints through Scalefusion UEM patching.
- Verify remediation status and remaining exposure.
This creates a closed-loop workflow that connects what SecOps identifies with what IT needs to remediate.
Bringing vulnerability detection into UEM
Vulnerability scanners can tell you what is vulnerable. Endpoint management platforms can help you fix it. Veltar brings both sides of that workflow together. With Veltar Vulnerability Management, you get vulnerability visibility across supported Windows and macOS endpoints, including OS components and third-party applications. Because detection is integrated with Scalefusion UEM, vulnerability data stays connected to the devices being managed.
And there is no separate vulnerability management agent to deploy or maintain.
Prioritize what matters, not just what scores high
While a CVSS score provides an important severity signal, severity alone does not tell you which vulnerability deserves attention first. Veltar Vulnerability Management adds real-world threat context to vulnerability prioritization. EPSS-based exploitability predictions help identify vulnerabilities that are more likely to be exploited, while continuous synchronization with the CISA Known Exploited Vulnerabilities catalog helps surface vulnerabilities with confirmed exploitation activity.
Veltar also considers factors such as affected devices, ransomware relevance, vulnerability age, and remediation deadlines to help IT and security teams determine where to focus their efforts.
Understand device-level risk
Vulnerability risk doesn’t exist in isolation. The same vulnerability can have a different impact depending on the endpoint and its surrounding context. Veltar addresses this with a dynamic Device Risk Score, giving administrators a contextual view of the vulnerability risk associated with an endpoint.
Instead of working through a long list of CVEs with the same level of urgency, teams can use device-level risk to identify where remediation attention is needed.
Remediate vulnerabilities with UEM patching
Detection only gets you halfway there and we wanted to fix that.
And this is where Scalefusion UEM comes in, helping you move from identifying a vulnerability to taking the right remediation action.
Once a vulnerability has been identified and prioritized, Veltar lets you remediate affected endpoints through Scalefusion UEM patch management. This means the team responsible for managing endpoints can act on the vulnerability from the same platform where those endpoints are already being managed. From vulnerability discovery to patch deployment, you can remediate without exporting vulnerability data, switching platforms, or introducing another remediation workflow.
A single pane of glass for detection and remediation
With a comprehensive dashboard, IT and security teams can view details of Vulnerability Risk Status, Device Risk Score, or severity status in relevant devices and device groups. Admins can also define maximum resolution windows based on severity, helping teams establish and enforce remediation SLAs and deadlines.
A more connected approach to vulnerability management
Vulnerability management will continue to evolve as the endpoint becomes a more important part of the security landscape. We see an opportunity to bring security and endpoint management closer together, so teams can spend less time connecting tools and more time addressing the risks they uncover.
Veltar Vulnerability Management software is a step in that direction. By bringing vulnerability detection, risk assessment, prioritization, and remediation into the UEM workflow, we’re connecting the work of identifying exposure with the work of resolving it.
There is more to build from here. We’re looking forward to seeing how IT and security teams use this new capability to bring greater context to vulnerability management and make remediation a more connected part of endpoint operations.
We invite you to explore Veltar Vulnerability Management and see what a connected approach to vulnerability detection and remediation can look like in your environment.
