There should be no such thing as “vulnerability management” in any business or organization. We all have computers and smartphones in our private lives, and none of us has a vulnerability scanning or patching application on any of them. When it’s time to update them, we’re notified by the vendor, we click “install,” and grab a cup of coffee. In minutes, our personal devices are updated, and known security flaws are fixed.
There’s only one reason that exact ritual is not practiced in businesses and organizations across the globe: the operational risk associated with installing a patch.
In layman’s terms, the fear that the patch may break something.
And yet, in the decades since vulnerability management was born as a foundational element of cyber security, not a single tool has been introduced to address the seminal reason for the discipline’s existence. The market is filled with scanners that identify vulnerabilities, engines that prioritize vulnerabilities, and patch managers that patch vulnerabilities. Some have agents. Some don’t. Some scan externally; some internally. Many provide risk scores, and just about everyone nowadays claims to leverage AI. You name it, somebody does it.
The vulnerability management market answers every question a practitioner or cybersecurity professional could want answered…except the only one that matters: will this patch break my shit.
Until now.
trackd was designed from day 1 to answer the one question anyone responsible for vulnerability remediation (and by extension, cyber risk) cares about. Yes, trackd identifies vulnerabilities continuously, and in near real-time when they’re discovered. Yes, trackd applies patches as well, obviating the need for multiple tools to find and fix vulnerabilities across multiple operating systems (and, coming in 2024, third party applications). But, what makes trackd different from all the other VM vendors, and positions us to not only disrupt this industry, but, over time, make a case for its elimination as a pillar of cybersecurity altogether, is our ability to answer the “will it break my shit?” question.
Our vision is to make software security patching as uneventful for the enterprise as it is for a personal phone or laptop, and we’re well on our way to doing so.
