The Process
The Vulcan platform works on top of Snowflake to leverage its proprietary risk model and provide risk-based prioritization to all vulnerabilities and misconfigurations discovered within the network. It applies context and business logic to vulnerability scan reports along with asset inventory and configuration data extracted from the Snowflake data platform (e.g. security groups, ELB configurations). With this level of visibility, the Snowflake team uses Vulcan to ensure they are remediating high-risk, public-facing vulnerabilities first, in accordance with Snowflake business requirements. Moreover, the Vulcan remediation intelligence library seamlessly provides the best remedy for the vulnerability, delivering Ansible patch and configuration automation scripts needed by the DevOps team to remediate vulnerabilities at scale. Armed with the necessary fixes, the DevOps team now only needs to review and apply the supplied solutions remotely.
To enable clear reporting and assessment of the vulnerability management program, key metrics and measurements were set, along with service level agreements, customized in accordance with Snowflake requirements.
 |
 |
 |
| Automated risk-based prioritization |
Aligning metrics and KPIs to the business |
Auto-generating patching scripts |
