← Back to context Comment by nathancahill 4 hours ago This is how Vanta et al. make millions. 1 comment nathancahill Reply paulryanrogers 2 hours ago I don't think Vanta itself even scans for CVEs? They scan for compliance which includes tooling that may look for CVEs, like Dependabot.Scanning companies should be sophisticated enough to distinguish invalid CVEs and back ported fixes.
paulryanrogers 2 hours ago I don't think Vanta itself even scans for CVEs? They scan for compliance which includes tooling that may look for CVEs, like Dependabot.Scanning companies should be sophisticated enough to distinguish invalid CVEs and back ported fixes.
I don't think Vanta itself even scans for CVEs? They scan for compliance which includes tooling that may look for CVEs, like Dependabot.
Scanning companies should be sophisticated enough to distinguish invalid CVEs and back ported fixes.