How to turn a vulnerability scan export into a client-ready report
Brandon Sooknanan
Why your OpenVAS PDF report is missing CVEs (and how to fix it)
Brandon Sooknanan
Vulnerability remediation timelines: how to set SLAs for clients
Brandon Sooknanan
Vulnerability scan vs penetration test: what's the difference?
Brandon Sooknanan
How often should you run vulnerability scans? PCI DSS, HIPAA, CIS and insurance
Brandon Sooknanan
CVSS vs EPSS vs CISA KEV: how to prioritize vulnerabilities
Brandon Sooknanan
Vulnerability management for MSPs: cadence, reporting and QBRs
Brandon Sooknanan
What a vulnerability assessment report should include (with a template)
Brandon Sooknanan
How to read a Nessus scan report (and turn it into a client report)
Brandon Sooknanan
Credentialed vs non-credentialed vulnerability scans: what changes in your report
Brandon Sooknanan
Why the Same Vulnerabilities Show Up on Every Scan (and How to Stop It)
Brandon Sooknanan
How to Explain Vulnerability Findings to a Non-Technical Client
Brandon Sooknanan