Vulcan Cyber (discontinued) Reviews & Insights

Vulcan Cyber solves problems to mitigate cyber-attacks in order to understand the risk and make correct and secure decisions. I have also used it for other needs such as security analysis, threat assessment in general and it is great and always gives good benefits.

The truth is that it works well most of the times we use it, its panel is nice and it is easy to handle, however sometimes there are problems with the automation and that is a problem, but it does not affect the performance at all.

We review all assets at our disposal for pending severe vulnerabilities. Once we identify the concerned device, we flag it for further review. If vulnerabilities are severe, we cooperate with our internal teams to brainstorm a way of addressing and resolving them. In case there do not seem to be any viable resolutions, we attempt to mitigate the problem as best as we can.

We use Vulcan Cyber to help with the technical debt accrued over time with systems that were not maintained as well as they should be. To combat this, we use the campaign feature to keep a running tab on every system to ensure it is brought up to standards and maintained.

We use Vulcan primarily for tracking vulnerability remediation efforts across our company. It's matrix allows my team to quickly and accurately assess our current trend in remediation and report this t our C-Level leadership in a way that is easy to digest and move on. That coupled with it's impressive asset management feature and CVE searching capabilities makes Vulcan a worth while tool to have in any cyber minded company.

Vulcan is best suited for an environment were there are a vast number of assets in the organization, where vulnerabilities are high, and getting those vulnerabilities remediated can get lost in the shuffle of regular operational tempo. Though Vulcan has a great asset management feature, I would not recommend Vulcan to a company that was purely looking for asset management.

We use Vulcan Cyber to help with the technical debt that has accrued over time with systems that were not maintained as well as they should be. To combat this, we use the campaign feature to keep a running tab on every system to ensure that it is first brought up to standards, and then to maintain them that way.

The ROI is almost immediate. Many eyes were opened wide when I displayed how many vulnerabilities were actually still active and how old some of them were. We have also made very good use of the SNOW integration, allowing us to better track the remediation cycle.

It a wonderful tool to manage different types of data, assets and vulnerabilities for different sources. it like a central place to see and analyze vulnerabilities for different environments and create process around mitigating them and make your org data and assets secured. A tool that's great for reporting and querying the right information required for threat analyses, the views and dashboards are a good way to understand the risks withing an organizations.
The kind of features it has in todays hybrid and cloud model environments is amazing. Critical vulnerability management in a real time solution with this tool, and its the future of cyber security for most industries standards.

Cloud vulnerability management

Vulcan is used for managing SLA timelines for vulnerabilties. It's useful for integrating all of our vulnerability scanning sources and adding it over to Vulcan. Another useful feature about Vulcan is the ability to automatically creates based on specific conditions and assign them over to the correct stakeholders via JIRA.

Vulcan is useful for managing SLA timelines for vulnerabilties. It's also useful for integrating all of our vulnerability scanning sources and adding it over to Vulcan. Another useful feature about Vulcan is the ability to automatically creates based on specific conditions and assign them over to the correct stakeholders via JIRA.

We needed to solve issues with security alerts that were hard to track in a big codebase. Vulcan is useful for filtering these alerts by repository and also gives a lot of visibility about dates and the type of alert we need to fix; severity is very descriptive. I still think the tables are a bit crowded, and some information could be ignored.

It provides a lot of helpful information, improves the visibility of issues, and adds traceability when you have a large codebase with many different alerts distributed throughout your repositories. I find the SLA status column in the vulnerabilities table very useful. Also, max risk is beneficial.

We use it a single pane for all our vulnerability data as well as an orchestration tool for ticketing. We also can customize risk priority based on internal and external methods.
Previously, different vulnerability scanners had different methods to create tickets to teams, but mostly we used excel files and didn't prioritize what a team needed to fix first.

Well suited when a customer doesn't have a solid process to organize vulnerabilities across multiple tools.

Not well suited for large organizations who don't have the manpower to do intensive role based management, user setup, or perform extra QA testing on features.

Vulcan Cyber allows us to centralize all the information regarding our corporate assets as well as any vulnerabilities they are affected by. For us, it is a single place of truth to understand the risks and exposure of our devices and take immediate and automated actions in case of any vulnerabilities that need to be remediated. It also allows us to automate the ticket creation process and share it with the different asset/risk owners so they are aware of how an when should they patch an issue.

It is well suited to ingest, parse, deduplicate and show unique assets and vulnerabilities coming from very different sources. It is also very useful to automate the process of vulnerability management when it comes to ticket creation and escalation, vulnerability retest and automatic ticket closure.
It has several customization options to cater to very different departments when it comes to SLA or risk appetite.
However, there are some UX bugs that make it a little hard to navigate the platform sometimes and can lead to a subpar user experience.

We use it to aggregate vulnerability findings from WIZ and Rapid7.

It is well suited to our company's effort to reduce overall vulns and empower application teams to be more self aware of issues as they are found. This helps to encourage organic growth of a strengthened security policy and processes. We are finding this easier to utilize than periodic pen tests were dozens of issues are dumped on teams requiring longer follow-up on resolution. More of a Fix as you go approach helping to keep security in the forefront of everyone's mind.