Top Vulnerability Management Software for Web-Based, Cloud, SaaS

Between them, the 14 vulnerability management software on this page cover vulnerability assessment (10), risk management (8), prioritization (8) and network scanning (6). 14 of them have written a profile you can read before you get in touch.

1. 1

   

   Nexus Lifecycle

   Vulnerability Assessment · Risk Management · Policy Management

   Nexus Lifecycle is a software composition analysis product from Sonatype.

   Write a review

   Why #1: No major incidents in 90 days (status page)

   Not yet on record: client reviews, vetting.

2. 2

   

   Continuity Engine

   Web Access / Restoration · Local Server Options · Multiple System Support

   Continuity Engine is business continuity software from Neverfail.

   Write a review

   Why #2: 24/7 support, as stated on its own website, read 5 Oct 2026

   Not yet on record: client reviews, vetting.

3. 3

   

   Demisto

   Vulnerability Assessment · Network Scanning · Vulnerability Scanning

   Demisto is a security orchestration, automation and response platform, now sold by Palo Alto Networks as Cortex XSOAR.

   Write a review

   Why #3: 3 major incidents in 90 days (status page)

   Not yet on record: client reviews, vetting.

4. 4

   

   ImmuniWeb

   Real Time Monitoring

   ImmuniWeb is an application security testing platform from High-Tech Bridge, a Swiss security services company.

   Write a review

   Why #4: Launched 2007, as stated on its own website, read 5 Oct 2026

   Not yet on record: client reviews, vetting.

5. 5

   

   Snyk

   Vulnerability Assessment · Risk Management · Policy Management

   Snyk is a security platform that puts vulnerability checks into the tools developers already use.

   Write a review

   Why #5: 2 major incidents in 90 days (status page)

   Not yet on record: client reviews, vetting.

6. 6

   

   HackerOne

   Vulnerability Assessment

   HackerOne is a security platform that lets organisations work with independent hackers to locate and fix vulnerabilities before attackers can exploit them.

   Write a review

   Why #6: Customer numbers stated on its own website, as stated on its own website, read 5 Oct 2026

   Not yet on record: client reviews, vetting.

7. Also listed, not yet ranked. We hold nothing checkable on these yet that ranks them here: no client review, vetting, award, expert review, or fact stated on their own website (and on a place ranking, where they are based). They follow in order of their TrustList Score. How TrustList ranks · Get vetted, free
8. –

   

   AlienVault USM

   Real Time Monitoring · Sensitive Data Identification · Vulnerability Assessment

   AlienVault USM, short for Unified Security Management, is a security product now offered under the AT&T Cybersecurity name.

   Write a review
9. –

   

   baramundi Management Suite

   Web Access / Restoration · Local Server Options · Multiple System Support

   baramundi Management Suite is endpoint management software with a vulnerability scanning module for company PCs and servers.

   Write a review
10. –

    

    Fyde

    Real Time Monitoring · Risk Management · Policy Management

    Fyde was a zero trust access product that let staff and outside parties reach company apps and workloads without a traditional VPN.

    Write a review
11. –

    

    Jazz Platform

    Sensitive Data Identification · Risk Management · Policy Management

    Jazz Platform is a security product that watches how information flows through an organisation.

    Write a review
12. –

    

    Sysdig Cloud

    Sysdig Cloud is the cloud security product from Sysdig, sold as Sysdig Secure.

    Write a review
13. –

    

    ArcSight

    Vulnerability Assessment · Risk Management · Network Scanning

    ArcSight is a security product from Micro Focus that combines user behaviour analytics with vulnerability management.

    Write a review
14. –

    

    Detectify

    Vulnerability Assessment · Asset Discovery · Web Scanning

    Detectify is an application security product that scans websites, APIs and the wider external attack surface for exploitable weaknesses.

    Write a review
15. –

    

    Qualys VM

    Vulnerability Assessment · Risk Management · Patch Management

    Qualys VM is the vulnerability management service from Qualys. It scans an organisation's network, works out which weaknesses matter and prepares reports from constant monitoring.

    Write a review

Articles

Latest insights

The newest guides and analysis from TrustList Insights.

All articles

United States

25 Oct 2026 · TrustList Editorial

DreamHost resets email and SFTP passwords after a webmail incident

The reset is done and owners can set new passwords in the panel now; File Manager, webmail and email hosting were still marked disrupted,…

China

25 Oct 2026 · TrustList Editorial

Moonshot to retire its Kimi K2 API models by the end of December

From 31 October new sign-ups lose access to kimi-k2.6 and kimi-k2.7-code; existing API users keep them until a retirement Moonshot plans…

Latin America

25 Oct 2026 · TrustList Editorial

Latin America: funding calls and deadlines closing soon (week of 26 October 2026)

Grants, co-funding and credit for technology companies from Brazil's FINEP and state foundations, Colombia's Minciencias, Uruguay's ANII,…