Public Disclosure Management

Edgewatch’s Public Vulnerability Disclosure SaaS provides a comprehensive solution for managing and disclosing vulnerabilities. By ensuring compliance with industry standards, facilitating structured workflows, and integrating with patch management systems, Edgewatch helps organizations maintain robust security postures and enhance transparency.

Public vulnerability disclosure refers to the process of making information about security vulnerabilities in software, hardware, or services publicly available. This is typically done after the vulnerability has been mitigated or fixed, allowing users to protect their systems while informing the broader community about potential security risks.

Key Features of Edgewatch’s Public Vulnerability Disclosure SaaS:

1. Systematic Cataloguing:
   • Edgewatch detects vulnerabilities through its advanced mechanisms or via external integrations.
   • Each vulnerability is systematically catalogued with detailed records to ensure comprehensive tracking and management.
2. Compliance with Standards:
   • The service ensures all processes adhere to ISO 27001 standards and NIS2 requirements, providing a robust framework for vulnerability management.
3. Structured Response Workflow:
   • From discovery to resolution, each vulnerability is managed with a structured, systematic approach.
   • This includes steps for initial assessment, remediation planning, and resolution tracking.
4. Full Public Disclosure Management:
   • When required, a vulnerability can be tagged as public and will be shared publicy in a custom public disclosure page offered for free by Edgewatch.
   • This includes reserving and assigning Common Vulnerabilities and Exposures (CVE) identifiers for the vulnerabilities.
   • Public disclosure is handled in a way that maximizes transparency while ensuring sensitive information is protected.
5. Collaborative Workflows:
   • Edgewatch facilitates collaboration among security teams and other stakeholders.
   • Collaborative workflows enable efficient remediation and ensure all parties are informed and engaged in the process.
6. Historical Tracking:
   • The service maintains a historical record of all discovered and managed vulnerabilities.
   • This allows organizations to review past vulnerabilities, understand trends, and improve future security measures.
7. Integration with Patch Management Systems:
   • Edgewatch integrates seamlessly with existing patch management systems.
   • This ensures that once a vulnerability is identified and disclosed, the remediation process is streamlined and patches are deployed efficiently.

How to Use Edgewatch’s Public Vulnerability Disclosure SaaS:

1. Detection and Cataloguing:
   • Vulnerabilities can be added both automated and manually.
   • As vulnerabilities are detected, Edgewatch automatically catalogs them with detailed information.
   • This includes the nature of the vulnerability, potential impact, and steps for remediation.
2. Assigning CVE Identifiers:
   • For vulnerabilities requiring public disclosure, Edgewatch handles the reservation and assignment of CVE identifiers.
   • This ensures that each vulnerability is uniquely identified and can be tracked in public databases.
3. Managing the Disclosure Process:
   • Edgewatch guides you through the disclosure process, ensuring that all necessary steps are followed.
   • This includes preparing the disclosure announcement, coordinating with affected parties, and managing the timing of the disclosure.
4. Post-Disclosure Activities:
   • After public disclosure, Edgewatch continues to track the vulnerability.
   • This includes monitoring for any further issues, verifying that patches are applied, and updating historical records.