Vulneo runs in your infrastructure or your private cloud. We host neither your inventories, nor your CVEs, nor your secrets, and we have no access to them.
Signed containers, installation in an isolated environment, offline updates possible.
Each subsidiary sees only its scope. Management sees the consolidated view. Roles, scopes per project and SSO (OIDC).
Exportable audit log of every decision, verdict change or report export.
Dependency and code analysis on every release, third-party penetration tests, coordinated vulnerability disclosure.
No product telemetry. Intelligence feeds (KEV, EPSS) are downloaded to you, not the other way round.
Secrets encrypted with your key, TLS everywhere, encrypted backups within your perimeter.
Agents and probes by API key, single-use enrolment tokens, agent updates verified by checksum with rollback.
We answer your vendor questionnaire and organise an architecture review with your teams.