Exposure management

“Bring devices, identities and vulnerability findings together, rank what attackers can reach first, track coverage gaps and assign fixes.” Runs on sample data until you connect your own feeds.

Exposure management app on demo data, Exposure overview page: alerts that 2 exploited findings sit on important devices and 2 leavers can still sign in, cards for 37 devices, 6 people exposed, a top priority score of 96 and 1 open fix, a Where to look first list led by Apache Log4j on prod-api-01, and bars for findings by priority and tool coverage

Pages: Overview, Assets, Identities, Risk priorities and Remediation, plus Matching, Knowledge Base and Settings, which every pre-built app has.

What it includes

Item	Type
Vulnerability Exposure Management Platform	Studio app
VEM Asset Inventory	Data feed
VEM Identity Exposure	Data feed
VEM Vulnerabilities and Threat Intel	Data feed
Remediation Tickets	Data feed
AssignRemediationFix	Action
Template Claude Link Matcher	Action

The asset, identity and vulnerability feeds each come in two versions: a published one and a v2 that imports as a draft. Nothing runs from a draft until you publish it.

What you need

To import, you need an Anthropic API key. The data feeds run on sample data until you connect your own.

Add it to your workspace

In Builder Mode, open Build Apps, find Exposure management in the Gallery and click Import. See Introduction for the full steps and what happens when you import.

Build a starting version yourself

Want to build something like it from scratch instead? Paste this into the Planner, which turns it into ready-to-launch prompts for each data feed, action and app. You can also paste it straight into the Studio Composer.

Build an exposure management app that brings devices, identities and vulnerability findings together and shows what to fix first.

Data: a device inventory from my endpoint and MDM tools, identities from my identity provider, and vulnerability findings with threat intelligence such as the CISA Known Exploited Vulnerabilities catalogue.

Pages:
- Overview: counts of devices, people exposed, the top-priority finding and open fixes, alerts for exploited findings on important devices and leavers who can still sign in, and a "Where to look first" list ranked by a priority score that weights findings exploited in the wild and important devices.
- Assets: every device, which tools can see it, and its coverage gaps.
- Identities: people with an exposure, such as no MFA or a leaver who can still sign in.
- Risk priorities: every finding, ranked by priority score.
- Remediation: a board of fixes with an owner and status for each.

Add an action that assigns a remediation fix to an owner.

This won’t recreate the pre-built app exactly. The Composer generates a new app each time, so the same prompt gives a different result every run, even twice in the same session. Treat it as a starting point and refine it in conversation. To get the app exactly as shown on this page, import it from the Gallery.

Use cases

Pre-built Apps

Tutorials

What it includes

What you need

Add it to your workspace

Build a starting version yourself