Why We Built Evidence Scan the Way We Did

We have officially launched the enterprise preview of our product, Evidence Scan. It’s not every day that you hit milestones like this as a company, and we are finally ready to start talking about it.

‍

What we have built is an extremely fast, highly scalable network vulnerability scanner. While that alone might be enough to sell some people on the value proposition, we hear a different major complaint from vulnerability management teams. They are drowning in an excess of vulnerabilities with questionable real-world liability. We feel it’s critical to reduce workload to the issues that are demonstrably the most dangerous to an organization, which de facto means ignoring many issues that simply do not help reduce the real-world risk. Therefore, our scanner has been purpose-built to focus only on the most meaningful risks, intentionally ignoring vulnerabilities that have never led to financial loss but that other scanners eagerly report as critical.

‍

I know it sounds odd to say, but at least one company could not get any incumbent scanning vendor to agree to scan once a day on all of their assets. None of them will even respond to the request for proposal. That’s incredibly dangerous, but it makes sense when vendors are optimized to find every vulnerability and are not focused on the quality of findings as measured by risk reduction. When these vendors know customers are price-sensitive and fully intend to use their product, they are in trouble. As we know, most scanning vendors only end up scanning a small percentage of the purchased allotment. If those economics change, and a sophisticated customer intends to fully use what they buy, vendors know they cannot operate profitably.

‍

What we deliver is an incredibly fast scanner that scales to an entire company’s environment. The advantage is that we can support the very largest organizations and meet their risk tolerance, even if incumbent scanners cannot perform the task due to performance issues, scaling constraints, or cost.

‍

We are going to change all that. If you would like to try the product in your environment, we would love the feedback. If you would like to learn more, please don’t hesitate to reach out.

‍