An Internal Event Bus That Powers Automation and Alerts
See how an in-process pub/sub event bus decouples producers from consumers and drives automation, alerts and audit. Learn the PMAP event model.
PMAP field notes
Field notes on running vulnerability management
Practical writeups on scan orchestration, finding correlation and remediation lifecycle, published by the practitioners who run vulnerability management on the platform, not by a marketing desk.
- Practitioner-authored
- Multi-vendor grounded
- Triage to closure
All vulnerability management notes
-
-
A Unified Calendar for Milestones, Scans and SLA Deadlines
See how a unified calendar surfaces SLA deadlines, scans, milestones, retests and agreement expiry on one timeline. Learn the PMAP calendar model.
-
Notification Rules and Channel Preferences That Scale
See how rule-based routing, severity filters and per-user preferences deliver alerts across in-app, email, Slack, Teams and webhooks in PMAP.
-
Licensing With Ed25519 JWT and Quota Enforcement
See how a signed Ed25519 license token enforces expiry, grace periods and asset quotas offline, with a global write gate. Learn the PMAP model.
-
Report Templates, Sections and Digital Signing
See how report templates control sections, conditions, watermarks and signing, then share securely with tokens and passwords. Learn the PMAP model.
-
Saved Filters and Views Across Ten Entities
See how saved filters and views persist analyst-ready presets across findings, assets, scans and more, with default-first ordering in PMAP.
-
How Asset Risk Scoring Is Calculated and Tuned
See the exact formula behind asset risk: severity weights times criticality, SLA and exposure factors. Learn how PMAP scores and ranks asset risk.
-
Reading the Wave Matrix: Scan Coverage You Can Trust
Understand what a wave matrix shows: each finding mapped across scan waves as open, closed, reopened or absent. See how PMAP proves scan coverage.
-
Real-Time Push With Server-Sent Events in Security Tooling
Learn how Server-Sent Events push live finding, scan and alert updates to the browser with scoped, multi-tenant delivery. See the PMAP SSE design.
