Automated Vulnerability Scanning and Vulnerability Management

Learn how to implement automated vulnerability scanning and vulnerability management systems in software development environments through this 46-minute conference talk from MRMCD2025. Discover practical approaches to identifying security vulnerabilities, misconfigurations, and development shortcuts before attackers can exploit them. Explore automated scanning techniques for repositories, Docker containers, and virtual machines to detect low-hanging security fruits, particularly vulnerable libraries and system misconfigurations. Understand how vulnerability management tools like DefectDojo can help rate, coordinate, and resolve security issues by providing visibility to both developers and managers. Gain insights from real-world implementation experiences and learn about the possibilities and challenges of establishing comprehensive vulnerability management workflows in modern software development practices.