StillSecure VAM 5.5
Strengths: High-powered vulnerability management for the larger enterprise
Weaknesses: Out of the price range for smaller deployments
Verdict: One of the more solid products we've seen, with good progress over the years
StillSecure's VAM provides serious vulnerability management in a single device. This powerful appliance focuses on automating vulnerability assessment and auditing for large-scale environments. Features include the ability to inventory assets, scan for vulnerabilities and manage the repair and remediation process. This product is designed to integrate directly with already running systems such as trouble-ticketing, patch management and network management.
This device comes out of the box and seamlessly plugs into the environment. Initial setup only takes a few minutes and, from there, discovery and scanning can begin. The VAM has a very well-designed user interface that is simple and intuitive to navigate and provides easy configuration of asset discovery and scan jobs.
VAM is a solid performer for the large-scale environment. We found one of its greatest strengths was its ability to not only find and report vulnerabilities, but to manage the vulnerability lifecycle as well. Administrators can easily track systems and remediation of threats just by drilling down through various report screens. This product also has some supreme reporting capability, with a wide selection of predefined report templates.
This offering has to have my favourite documentation of all the products. The VAM comes with a large black ring binder filled to the brim with information. While this binder is big, clunky and almost requires its own shelf in a server room, it is well organised and very thorough. The good news is this guide includes all the necessary documentation for the whole product from installation to advanced configuration.
StillSecure offers free technical support by phone and email during office hours, while premium support can be purchased for round-the-clock coverage. There is also a small support section available on the website, which has a brief FAQ section, update information, security checks and open-source packages for download.
At £5 per IP for an environment of between 2,500 and 5,000 users, the VAM is not a small investment. However, we do recognise that it is geared to manage large environments and it does bring some high-end features to the table.