Microsoft Defender Vulnerability Management

Device Discovery

Identifies managed and unmanaged endpoints in real-time using agentless scanners and built-in modules.

Device Inventory

Maintains entity-level inventories of devices including software applications and firmware.

Vulnerability Assessment

Performs continuous vulnerability detection across Windows/macOS/Linux/Android/iOS/network devices.

Configuration Assessment

Evaluates device configurations against security standards like CIS benchmarks and STIGs.

Risk-Based Prioritization

Uses Microsoft threat intelligence to dynamically prioritize vulnerabilities based on exploit activity and asset criticality.