Book a Demo
A cracked brass padlock glowing amber from within — vulnerability and penetration testing
APPCELERATE SUITEAGENT-NATIVE

Vulnerabilities, normalized and owned.

Ingest Qualys VMDR and OpenVAS reports, normalize them into 48 CVE groups across 36 assets, track 89 open vulnerabilities with SLA-breach trends, heatmaps and governed exceptions.

What is VAPT?

VAPT is Moderor's vulnerability management product. It ingests scanner reports (Qualys VMDR, OpenVAS), normalizes findings into CVE groups and issues across assets, tracks open vulnerabilities with SLA-breach trends and a high-risk asset heatmap, and governs exceptions with explicit reasons.

Observed In Production
  • 8 SCANNER REPORTS INGESTED
  • 48 CVE GROUPS / 90 ISSUES
  • 89 OPEN VULNS / 11 SLA-BREACHED
  • EXCEPTION GOVERNANCE BUILT-IN
demo.moderor.ai
VAPT dashboard in Moderor.ai

Capabilities

/ FEATURES
Ø1

Scanner ingestion

Qualys VMDR and OpenVAS reports upload directly and normalize into one vulnerability model.

Ø2

CVE grouping

Findings collapse into 48 CVE groups / 90 issues across 36 assets — deduplicated, not duplicated.

Ø3

SLA breach tracking

89 open vulnerabilities tracked with an SLA-breach trend (11 breached) and a high-risk asset heatmap.

Ø4

Exception governance

Exceptions require a reason — Technical Constraints, Business Dependency or Legacy Incompatibility — and stay visible.

By the numbers

/ PROOF
0
CVE groups
0
Issues normalized
0
Assets covered
0
SLA breaches visible

Questions, answered

FAQ
Which scanners does VAPT support?

Qualys VMDR and OpenVAS report ingestion are built in — 8 reports were processed in the reference deployment — and the normalized CVE model is scanner-agnostic.

How does VAPT handle exceptions?

Exceptions are governed: each requires an explicit category — Technical Constraints, Business Dependency or Legacy Incompatibility — so accepted risk is documented, not forgotten.

What does the dashboard show?

Open vulnerabilities (89 in reference data), SLA breach trends (11 breached), a high-risk asset heatmap and CVE-group drill-downs.

See it on your data.

Connect a source over MCP, point an agent at a control set, and watch the first findings arrive — with you in command.