TREN

NPM Security content

Security content, up to date every day.

Netronus updates its vulnerability (CVE) database, ready-made compliance rules and change detection patterns every day, independently of the product release. Content is signed; organizations without internet access receive the same content as an offline package.

Request a demo See capabilities
Ready-made rules: 183 compliance rules with vendor, severity and framework mappings
Ready-made rules: 183 compliance rules with vendor, severity and framework mappings

The problem

What gets in the way today

01

Stale vulnerability lists

A fixed CVE list shipped with a product is outdated within months; new vulnerabilities stay invisible.

02

Prioritization

Separating actively exploited vulnerabilities from hundreds of CVEs takes time.

03

Audit preparation

Checking configurations against corporate policy and regulation by hand is slow and error-prone.

The solution

Signed content by subscription

Content is checked every day, and content whose signature cannot be verified is never imported. Device versions are evaluated automatically against affected version ranges; the whole inventory is scanned after every update and once a day.

  • Sources: NVD, CISA KEV (known exploited vulnerabilities), FIRST EPSS (exploit probability)
  • An event and an e-mail when a new KEV or CVSS 9.0+ vulnerability is found
  • The content subscription is licensed separately; the product keeps running if it ends

Framework references

  • CIS Benchmarks
  • ISO/IEC 27001:2022
  • Presidential Security Guide (BİG)
  • BDDK
  • KVKK

Compliance rules reference and are mapped to the listed frameworks; they are not endorsed or certified by the framework owners. CIS text is not copied, only section numbers are used.

Capabilities

What you get

Daily CVE updates

NVD, CISA KEV and EPSS data every day; KEV badge, EPSS probability and the fixed version when available in reports.

Version range matching

Assign a device version by hand or let Netronus detect it from the system description; affected ranges are evaluated automatically.

183 ready-made compliance rules

For Cisco IOS, ASA and NX-OS, FortiOS, Check Point Gaia, HPE Aruba switches, Huawei VRP, Juniper Junos and MikroTik RouterOS.

Framework references

Rules are mapped to CIS benchmark sections, ISO/IEC 27001:2022 Annex A, the Turkish Presidential Information and Communication Security Guide, BDDK and KVKK.

Change detection patterns

Vendor patterns that spot configuration changes in syslog messages are updated with the content.

Signed content

Every content package is signed; content with an invalid signature or an attempt to roll back to an older release is rejected.

Offline package

Organizations without internet access upload the content package in the interface; the signature is verified the same way.

Automatic scans and alerts

New critical findings appear on the Events screen and users with access to the device get a summary e-mail.

Screenshots

See it in the product

Security report: severity distribution, vendor and CVE type statistics, findings per device
Security report: severity distribution, vendor and CVE type statistics, findings per device
Security checks: content version, CVE and KEV counts, devices to scan
Security checks: content version, CVE and KEV counts, devices to scan

Technical summary

At a glance

ItemDetail
CVE sourcesNVD, CISA KEV, FIRST EPSS
UpdatesDaily and automatic; “Check now” on demand
Compliance rules183 rules, 9 platform families
Framework referencesCIS (Netronus interpretation), ISO/IEC 27001:2022 Annex A, Turkish Presidential Information and Communication Security Guide, BDDK Information Systems Regulation, KVKK
IntegritySigned content; rollback protection
Isolated networksSigned offline content package
NotificationEvent and e-mail for new KEV or CVSS ≥ 9.0 findings

See Netronus in your own environment

We will set up a demo on your network, show the screens with your own devices and prepare a quote for the modules you need.

Request a demo

Related

Better together

Configuration Management

Back up device configurations with templates, compare versions, and audit them against your policies and known vulnerabilities.

Explore the module

Alarm Engine

Thresholds with duration and hysteresis, rate of change, forecasts, seasonal baselines; maintenance and dependency suppression. One engine for network, servers and storage.

Explore the module

Deployment

Runs on your own server. Signed updates; offline updates, licenses and content for networks without internet access.

Explore the module

See Netronus in your own environment

We will set up a demo on your network, show the screens with your own devices and prepare a quote for the modules you need.

Request a quoteRequest a demo