What is Kenna?

Kenna Security, now part of Cisco, was a risk-based vulnerability management platform. It aggregated vulnerability data from various sources (e.g., vulnerability scanners, penetration tests) and correlated it with threat intelligence and exploit data to prioritize vulnerabilities based on actual risk. This allowed organizations to focus their remediation efforts on the vulnerabilities that posed the greatest threat to their environment, rather than simply addressing vulnerabilities based on severity scores alone. Kenna was used to improve remediation efficiency, reduce overall risk exposure, and provide better visibility into an organization's security posture.