Category
Vulnerability and exposure
What the internet already sees, and the ticket you already have. Inventory and queue. Detection lives under Security Operations. SAST lives under Application Security. Open a shortlist for the buy you are making.
More categories
Questions about Vulnerability and exposure
Is this a pentest pillar?
No. A pentest is a scoped test. These lists are what is already visible and how you queue it.
Does a scanner replace the SIEM?
No. A finding is not a detection you hunt.
Where does CSPM sit?
Account misconfig is Cloud. This pillar is the public name and the ticket.
