Microsoft - Microsoft Defender Vulnerability Management Add-on

Security baselines assessment

Create customizable baseline profiles to measure risk compliance against established benchmarks, such as, Center for Internet Security (CIS) and Security Technical Implementation Guides (STIG).

Visibility into software and vulnerabilities

Get a view of the organization's software inventory, and software changes like installations, uninstalls, and patches.

Network share assessment

Assess vulnerable internal network shares configuration with actionable security recommendations.

Authenticated scan for Windows

Scan unmanaged Windows devices regularly for software vulnerabilities by providing Microsoft Defender Vulnerability Management with credentials to remotely access the devices.

Threat analytics and event timelines

Use event timelines, and entity-level vulnerability assessments to understand and prioritize vulnerabilities.

Browser extensions assessment

View a list of the browser extensions installed across different browsers in your organization. View information on an extension's permissions and associated risk levels.

Digital certificates assessment

View a list of certificates installed across your organization in a single central certificate inventory page. Identify certificates before they expire and detect potential vulnerabilities due to weak signature algorithms.

Hardware and firmware assessment

View a list of known hardware and firmware in your organization organized by system models, processors, and BIOS. Each view includes details such as the name of the vendor, number of weaknesses, threats insights, and the number of exposed devices.