Clateway Insights platform
Vulnerability management
Clateway scans the technologies and versions in your architecture against the NVD and tells you which CVEs matter: exploit probability from EPSS, known exploitation from CISA KEV, MITRE ATT&CK mapping and the criticality of the affected system.
SaaS platforms are patched by their vendor, so instead of noise Clateway watches their security bulletins and tells you which advisories need action, which need verifying and which the vendor already fixed.
Request access to Clateway Insights
Features
- CVE scanning by technology and installed version (CPE matching)
- Prioritisation with CVSS, EPSS, CISA KEV and system criticality
- SLA targets per severity with compliance reporting
- Scheduled scans with e-mail notifications
- GitHub Dependabot alert sync
- SaaS vendor advisory watch with AI triage
- CVE news and AI news summaries per vulnerability
- Incidents raised in Clateway Tickets or ServiceNow
Frequently asked questions
What is EPSS?
The Exploit Prediction Scoring System (EPSS) from FIRST estimates the probability that a vulnerability will be exploited in the next 30 days, which helps you fix the CVEs that attackers actually use first.
How is this different from a network vulnerability scanner?
Clateway works from your architecture: the systems, technologies and versions you run. It needs no agents or network access, and links every CVE to an owner, a system and a business criticality.
Related insights
- AI and Cybersecurity: The Growing Threat of AI-Powered Identity Fraud
- AI Agent Security: The New Identity Management Frontier Demanding C-Suite Attention
- Cybersecurity at the AI Inflection Point: A New Threat Architecture
- Approach and architecture of GenAI and Enterprise data
Compare vendors
- AI-Enhanced Cybersecurity vendors
- Application Security vendors
- Cloud Security vendors
- Cybersecurity Solutions vendors
- Endpoint Security vendors
- Network Security vendors
- Security Awareness Training vendors
- Security Information and Event Management (SIEM) vendors
Key terms explained
- What is the Cyber Resilience Act (CRA)?
- What are CVE and CVSS?
- What is EPSS (Exploit Prediction Scoring System)?
- What is the CISA KEV catalogue?
- What is an SBOM (software bill of materials)?
Related solutions
- EU Cyber Resilience Act compliance – Prepare for the EU Cyber Resilience Act: product registry, SBOM quality checks, CSAF advisory matching, threat modelling, pen test and conformity evidence.
- ISO 27001 risk register and risk assessment – An ISO 27001 risk register with heat maps, risk appetite, treatment plans, acceptances and AI suggestions from your own systems, vulnerabilities and vendors.
- IT incident management and service desk – Incident management and service requests with priority matrix, SLAs on business hours, major incidents, a self-service portal and two-way ServiceNow sync.