Comment by nathancahill 3 hours ago This is how Vanta et al. make millions. 1 comment nathancahill Reply paulryanrogers 31 minutes ago I don't think Vanta itself even scans for CVEs? They scan for compliance which includes tooling that may look for CVEs, like Dependabot.Scanning companies should be sophisticated enough to distinguish invalid CVEs and back ported fixes.
paulryanrogers 31 minutes ago I don't think Vanta itself even scans for CVEs? They scan for compliance which includes tooling that may look for CVEs, like Dependabot.Scanning companies should be sophisticated enough to distinguish invalid CVEs and back ported fixes.
I don't think Vanta itself even scans for CVEs? They scan for compliance which includes tooling that may look for CVEs, like Dependabot.
Scanning companies should be sophisticated enough to distinguish invalid CVEs and back ported fixes.