Struggling with remediation actions and understanding of where the most pertinent vulnerabilities lie.
“I can delegate fixes across teams (app, devops, infrastructure, sysadmin) and track progress. It saves me hours and the CISO can see where the bottle necks are..”
— Head of Development (Individual Risk Owner)
Risk based, contextual algorithms mean priorities for fixes are automated or determined by Risk Owners depending on business urgency and risk appetite.
Fixers are incentivised to seek out higher priority fixes meaning that issues are addressed quickly and autonomously.
Understanding and sharing the full picture of our cyber security posture across the business.
“We started using PLANETPENTEST as an asset management platform by uploading all of our various vulnerability scans from around the business. Now I have a register for risk and a way of seeing which areas of our network are being neglected.”
— CISO (Senior Information Risk Owner)
“Our CISO presents us the galactic view of our networks and the Board immediately understands the state of play.”
— CEO
“We have it up in the SOC so that when we get an alarm we can cross check whether the host in question has been recently scanned or penetration tested or whether the system owner is aware of the risks at hand.”
— SOC Manager
CISOs can pull in data from Vulnerability Management tools and multiple penetration tests for comparison in a single pane view of risks across the organisation.
Knowing which parts of our business are carrying the most risk.
“I use it to see which of my systems’ owners are carrying the most risk, which are actively working to reduce the risk on their systems and which are just accepting the risk or doing nothing. The automated email updates save me chasing.”
— CISO (Senior Information Risk Owner)
Working with Service Providers to improve cyber security posture.
“We can show distinct boundaries of ownership with our clients and share responsibilities in remediating issues. Clients can get a clear view of how we are delivering security posture improvement and keeping to our contractual obligations.”
— Contract Manager, MSP (Risk Owner)
“I’m prompted when a retest is needed or a client has a question which makes my time management easier. It’s also great to be able to easily refer to previous findings to provide context.”
— Penetration Tester, Pen Test Company
