Applications such as Google Chrome, Mozilla Firefox, 7-Zip, Adobe Reader, Zoom, Microsoft Teams, VLC, Java and many other third-party applications can contain vulnerabilities that need to be addressed independently of Windows Update.

​

Actonix continuously builds an inventory of installed applications and versions, identifies vulnerable software and helps IT teams move from "What is installed?" to "What needs to be patched?" and finally "Has it been remediated?"

​

From Software Inventory to Vulnerability Remediation

​

1. Discover   Automatically collect installed software information from managed endpoints.

   Application → Publisher → Version → Installation Path → Endpoint

​

2. Identify   Compare installed application versions against vulnerability intelligence and identify vulnerable software.

     Application → Version → CVE → CVSS → Severity → Affected Endpoints

​

3. Prioritize   Focus on vulnerabilities that represent the greatest security risk.

    Prioritize based on:

• Critical and High severity vulnerabilities

• Vulnerable applications

• Number of affected endpoints

• Application exposure

• Patch availability

 

4. Remediate  Deploy the appropriate application update using Actonix policies, scheduled jobs or targeted deployments.

 

5. Verify   After deployment, Actonix rescans the endpoint and verifies whether the vulnerable version has been replaced.

    Detect → Patch → Verify → Report

​