---
title: Vulnerability Response Management (VRM)
slug: solutions/vulnerability-response-management-vrm
docTags: 
createdAt: 2025-08-11T11:13:45.690Z
---

Swimlane Vulnerability Response Management (VRM) centralizes vulnerability ingestion, enrichment, prioritization, case management, remediation, and reporting.

![VRM workflow from ingestion through remediation and reporting](https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/sFVJGlVyIVze54W-DDKFG_vrm-solution-overview.jpg)

## Choose Your Path

| **Goal**                                           | **Go To**                                                                   |
| -------------------------------------------------- | --------------------------------------------------------------------------- |
| Understand the end-to-end automation               | [Vulnerability Response Management Workflows](docId\:nY3lBmo1Jcrpu3oKYIZOX) |
| Learn what each application and dashboard provides | [VRM Applications and Dashboards](docId\:L9P4PEQRMb2T3Y0ZhFYZL)             |
| Identify playbooks, flows, and reusable components | [VRM Playbooks and Components](docId:_c4kSJVnm0IxzzECpx4yQ)                 |
| Work with findings, assets, cases, and metrics     | [Using Vulnerability Response Management](docId\:Zr-BWzZQvwczrGzwoAX-F)     |
| Install and configure the solution                 | [Installing and Configuring](docId\:Ogy_Ryoz7XlrTm0XG73zm)                  |
| Configure a managed service provider deployment    | [Using VRM for MSSPs](docId\:k0dk60PQ1YiKqftcG1exj)                         |

## How VRM Works

| **Stage** | **Capability**         | **Result**                                                                                                           |
| --------- | ---------------------- | -------------------------------------------------------------------------------------------------------------------- |
| 1         | Ingest                 | Accept vulnerability and asset data from CSV files, a webhook, or integration logic.                                 |
| 2         | Page and filter        | Divide large inputs into ingestion pages and remove known or excluded findings.                                      |
| 3         | Normalize              | Map source data to the Turbine Schema vulnerability finding format.                                                  |
| 4         | Enrich and score       | Add vulnerability intelligence, associate assets, and calculate the Turbine Risk Score.                              |
| 5         | Manage exceptions      | Apply active exceptions before findings proceed through grouping and remediation.                                    |
| 6         | Group and create cases | Group related findings manually or automatically and associate them with vulnerability cases.                        |
| 7         | Remediate              | Create remediation items, submit work to the configured IT service management channel, and synchronize status.       |
| 8         | Report                 | Generate reporting records and dashboards for findings, assets, exceptions, remediation items, and attention states. |

## Core Applications

VRM uses five primary applications for findings, assets, cases, remediation items, and exceptions. See [VRM Applications and Dashboards](docId\:L9P4PEQRMb2T3Y0ZhFYZL) for application relationships, automation ownership, and monitoring views.

## Next Steps

- Review [Vulnerability Response Management Workflows](docId\:nY3lBmo1Jcrpu3oKYIZOX).
- Use [VRM Applications and Dashboards](docId\:L9P4PEQRMb2T3Y0ZhFYZL) to identify where each record type appears.
- Use [VRM Playbooks and Components](docId:_c4kSJVnm0IxzzECpx4yQ) to trace the automation responsible for each stage.