Keynote: Vulnerability Data is Not Enough: The Case for an Actionable UI
summary
Claim: vulnerability feeds alone don’t reduce risk; platform teams face thousands to tens of thousands of CVEs and need a UI that joins CVE data, SBOM/inventory, and automation to actually remediate. The proposed interface provides a read-only dashboard with highlights and alerts, a right view to annotate CVEs, show blast radius and impacted services with lead times, and interoperable APIs for seamless handoffs (the team has incorporated Backstage as an example). The goal is prioritized, collaborative remediation that preserves uptime.
AI-written summary · about
related talks
15mKeynote
27mEffective Vulnerability Management for a DevSecOps Pipeline
59mWho’s Vulnerability Is It Anyway? Harmonizing Stakeholder Roles in Vulnerability Management
14mKeynote: Keep Calm and Keep Coding: How To Not Panic When Big CVEs Drop
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
33mFrom Chaos to Calm: Vulnerability Management for a Dynamic, Sprawling Technology Estate
28mHow Do We Leverage CVE Root Cause Mapping and CWE Data to Prevent New Vulnerabilities?
09mInterview