The Importance of Being the Leader in Public Vulnerability Research

Trend Micro -

To be your most resilient, your vendor must have the breadth and depth of vulnerability knowledge necessary to detect both known and unknown . Omdia, a global leader that aims to enable organizations to make informed choices, recently released the edition of Quantifying the Public Vulnerability Market.

This report examines the disclosure output of 11 vendors by cross-referencing vendor data against information published by various agencies, such as: MITRE, the National Institute of Standards and Technology (NIST), and the United Stated Computer Emergency Response Team Coordination Center (US CERT/CC). Through comparative analysis and research, Omdia provides visible metrics to gauge the severity of the vulnerabilities and which vendor disclosed them.

By the numbers

™ Zero Day Initiative™ (ZDI) accounted for 60.5% of the vulnerabilities disclosed in a new Omdia study. The ZDI maintains its position as the world’s largest vendor-agnostic bug bounty program for the 13th consecutive year. Trend Micro had the most disclosures across all severity levels, with 77% of their disclosures being critical or high severity rating.

“The number of vulnerabilities discovered by all independent researchers totaled less than half of those offered by Trend Micro,” said Tanner Johnson, principal analyst

Read More: https://www.trendmicro.com/en_us/ciso/21/f/the-importance-of-being-the-leader-in-public-vulnerability-research.html