Know what you run.
Match what matters.
Inventory-first vulnerability management with honest coverage — clarity instead of false certainty.
How it works
From inventory to findings — one clear path
Connectors report what is installed. Vulmeta maps identity, matches versions against advisories, and surfaces findings you can act on.
-
01
Inventory
Hosts, applications, and packages arrive as observations — complete visibility of what you actually run.
-
02
Match
Verified product identities are evaluated against curated vulnerability data and version ranges.
-
03
Act
Findings separate technical evaluation from workflow status so teams can prioritize with confidence.
Honest coverage
Evaluate what you can identify. Show what you cannot.
Vulmeta does not claim every extension is “safe” or “vulnerable.” Uncovered components stay visible — so risk decisions stay grounded.
- Full inventory Everything observed is retained and searchable.
- Verified matching Findings only when identity and version ranges align.
- Transparent gaps Unmapped or uncovered items are labeled, never hidden.
Connect
Bring your stack into one evaluation surface
Install connectors for the systems you operate. They send inventory; Vulmeta owns identity, coverage, and matching centrally.
- Host agent for OS packages and containers
- WordPress & Joomla connectors
- Extensible registry for further sources