Find and Fix Today's Vulnerabilities Today

Skybox Vulnerability Control (formerly Risk Control)

Continuous vulnerability discovery, analysis, and remediation


How It Works

  • Incorporates vulnerability data from third-party scanners or with Skybox Vulnerability Detector
  • Simulate attack scenarios from multiple threats
  • Incorporate information on network security controls
  • Automated proposal of remediation alternatives
  • Generate tickets and workflows
  • Prioritize vulnerabilities based on exploitability and imposed risk
  • Identify riskiest vulnerabilities to fix immediately


Skybox Vulnerability Control (formerly Risk Control) discovers vulnerabilities daily, automatically evaluates business risk, and prioritizes remediation activities within the context of your network.


Vulnerability Assessment

  • Automatically and accurately generate vulnerability data without an active scan by analyzing data repositories including patch and asset management systems
  • Consolidates vulnerability data from multiple third-party scanners

Attack Simulation

  • Discover all possible attack scenarios, by all possible threats with business impact
  • Simulate attack scenarios to determine the impact of an attack from multiple different threat origins
  • Scalable to large, complex networks where this analysis could not be done manually.

Context-Aware Prioritization

  • Perform context-aware analysis to find vulnerability hot spots and map them to business units or geographies, vendor platforms, security bulletins and more.
  • Identify attack vectors, taking into network access paths, compensating security controls such as firewalls and IPS, and risk to valuable assets.
  • Eliminate unnecessary patching, and quickly reduce the attack surface to lower risk as fast as possible.

Actionable Remediation

  • Remediate based on risk instead of severity to focus resources on the risk inducing vulnerabilities, not just criticality.
  • Provide prioritized remediation options and track remediation progress.


  • The Discovery Center provides a centralized view of the initial vulnerability assessment process, including quick access to vulnerability data gathered from third-party scanners or Skybox’s scanless Vulnerability Detector.
  • The Analytics Center uses sophisticated risk analytics and the Skybox Vulnerability Database to eliminate irrelevant vulnerability data and provide an accurate, prioritized picture of risk.
  • The Remediation Center, featuring a vulnerability remediation dashboard, supports fast resolution to achieve desired security objectives.