Faraday Vulnerability Management Platform by Faraday optimizes the vulnerability management process, making it accessible, agile, scalable, and efficient. It is customizable and integrates with numerous tools. Faraday Vulnerability Management Platform normalizes, tracks, and identifies assets and vulnerability data from over 150 integrations, supporting leading security scanners. It provides actionable reporting and vulnerability templates, allowing companies to export data into compliance-ready formats. The platform features continuous scanning and real-time insights for system security, with a multi-engine scanning platform supporting various industry security tools. It supports 2nd Factor Authentication with apps like Google Authenticator and Authy. Users can access the platform through multiple channels, identified by username and profile, allowing for moderated access and data governance. Workspaces summarize information from different sources and generate information. Assets are any device, resource, or component that supports information-related activities, such as IP addresses and FQDN in an assessment. Duplicate Vulns Management helps search for possible duplicates and allows users to associate vulnerabilities that refer to the same issue, with the option to display only one vulnerability and hide the rest. The Executive Report feature allows users to create reports using results from each workspace, automatically processing data into a PDF/Word document for download. Pipelines & Jobs automate tasks after an agent terminates and when new vulnerabilities are added. Profiles provide access to various data visualizations for managers, pentesters, clients, and asset owners. Faraday CLI enables use of Faraday directly from the terminal, automating security workflows. The Process Scheduler automates repetitive agents’ actions and checks results on the dashboard. Ticketing Integration allows sending data from Faraday to Jira/ServiceNow as tickets. Data Analysis enables users to view assessments in one place, helping to find new relations in data and clarify assessment states. Users can set up their own action strategy, assign tasks to users, and track projects directly from Faraday. It includes default methodologies for quick setup and allows users to organize vulnerabilities with tags. Agent Technology enables defining and executing actions from various sources and automatically importing outputs into the repository. Custom Fields extend the vulnerability model with additional fields, which can be of type int, str, list, or choice. Inline images can be used with Faraday Evidence by adding an Evidence file to vulnerabilities and using markdown. Deployments require no infrastructure changes: implement Faraday On-prem, Cloud, or Hybrid without network changes. The Web Shell allows working directly from the web using ZSH as a console, connected to the user's own shell. Workspace Comparison lets users see and assess differences between two workspaces. Vulnerability Templates help avoid repetitive descriptions and typos in reports, unifying criteria for naming vulnerabilities. Faraday offers three kinds of plugins: console, report, and API, which can be used together. Nmap has a Console plugin to run it directly from ZSH and a Report plugin to import scans run outside of Faraday.
