The vulnerabilities that matter - first.
The COD vulnerability module (VAS, Vulnerability Assessment / vulnerability scanning) is the vulnerability management system of the COD platform. It prioritizes scan findings based on risk, shows the remediation status at a glance, and makes the evolution of your attack surface visible over weeks - multi-tenant and fully on-premises.
Vulnerability scanners produce lists with thousands of findings, without telling you what to tackle first - and that is exactly where security budget dissipates into noise instead of risk. The COD vulnerability module (VAS) flips this around: it prioritizes based on risk, shows the remediation status at a glance and makes visible over weeks whether your attack surface is growing or shrinking - multi-tenant and fully on-premises.
Active scans, clear severity distribution
- Recurring vulnerability scans on the living asset base of COD - no more siloed lists from yesterday.
- Findings broken down by severity: critical, high, medium, low.
- See at a glance where there is an urgent need to act - instead of scrolling through a thousand rows.
Prioritize by risk instead of working through a list
- Not every finding is equally dangerous: VAS puts front and center what truly matters in the context of your environment.
- Scarce resources go where they deliver the greatest security gain.
- No more lists without context - you know where to start.
Remediation status in view throughout
- Track per finding what is open, in progress or resolved.
- Progress becomes measurable - the gap between “detected” and “done” closes in a traceable way.
- A clear status for team, management and audit, without maintaining separate spreadsheets.
Trends over weeks - is it getting better?
- Trend analysis shows the evolution of your attack surface over weeks.
- Proves impact to management and audit: security becomes a curve, not a claim.
- Warns early when new risks appear - before a vulnerability turns into an incident.
Multi-tenant & on-premises
- Multiple customers, sites or departments cleanly separated in one platform.
- Fully deployable on-premises - full control of your data, KRITIS-ready.
- Part of the modular COD platform: one living data set for all modules instead of five separate versions of the truth.
Frequently asked questions
See the risk before it becomes an incident.
We'll show you the vulnerability module hands-on in your own environment, with no commitment - or download the VAS datasheet directly as a PDF.