Vulnerability Response Management (VRM)
Swimlane Vulnerability Response Management (VRM) centralizes vulnerability ingestion, staged enrichment, prioritization, case management, remediation, and reporting.
VRM 26.3.0 is a breaking change from earlier VRM packages. Findings move through VRM - Ingestion Page records into VRM - Staged Ingestion batches. The Swimlane VRM Enrichment connector enriches each batch before Vulnerability Finding records are created or updated.
Choose Your Path
Goal | Go To |
|---|---|
Install the 26.3.0 package and client configuration | |
Understand the end-to-end automation | |
Learn what each application and dashboard provides | |
Identify playbooks, flows, and reusable components | |
Work with findings, assets, cases, and metrics | |
Configure a managed service provider deployment |
How VRM Works
Stage | Capability | Result |
|---|---|---|
1 | Ingest | Accept vulnerability and asset data from CSV files, a webhook, or integration logic. |
2 | Page | Divide large inputs into VRM - Ingestion Page records. |
3 | Stage | Collect pending pages into a VRM - Staged Ingestion batch. |
4 | Enrich and score | The Swimlane VRM Enrichment connector adds intelligence, compares known findings and assets, applies exceptions, and calculates the Turbine Risk Score. |
5 | Write findings | Create or update Vulnerability Finding records and attach failed-finding details when a batch item cannot be written. |
6 | Group and create cases | Group related findings manually or automatically and associate them with vulnerability cases. |
7 | Remediate | Create remediation items, submit work to the configured IT service management channel, and synchronize status. |
8 | Report | Generate reporting records and dashboards for findings, assets, exceptions, remediation items, and attention states. |
Core Applications
VRM uses five primary applications for findings, assets, cases, remediation items, and exceptions. The 26.3.0 package also uses VRM - Staged Ingestion and VRM - Export Findings & Assets for the enrichment pipeline. See VRM Applications and Dashboards for application relationships and monitoring views.
Next Steps
- Complete Installing and Configuring before you ingest production findings.
- Use VRM Playbooks and Components to trace VRM - Stage for Enrichment.