StonePath Cyber · Vulnerability Management
Patch & Vulnerability Management Program
An ongoing, senior-led program that keeps known vulnerabilities found, prioritized and closed — every month, not just after an incident.
$997/month
Billed monthly · Cancel ahead of your next billing date · Secure checkout by Stripe · We email you after checkout to schedule onboarding
What it is
A recurring monthly program that turns vulnerability management from an occasional scramble into a routine. Your named advisor works embedded with your IT team or provider to run regular vulnerability scanning, triage results by real-world risk, set patch priorities and track remediation through to closure. Each month you get a clear status of what was found, what was fixed and what is still open.
What’s included
- Recurring vulnerability scanning — scheduled scans of agreed in-scope systems
- Risk-based triage — findings prioritized by exploitability and business impact, not raw counts
- Patch cadence & policy — a documented patching cadence and exception process for your environment
- Remediation tracking — every open item tracked to closure with your IT team or provider
- Monthly status report — what was found, fixed and still open, in plain language
- Monthly advisor check-in — a working session with your named senior advisor
Who it’s for
Organizations without a dedicated security team that know patching is falling behind, or that need to show customers, insurers or auditors a repeatable vulnerability management process.
Senior-led, embedded
Every StonePath Cyber engagement is led by a named senior advisor who works alongside your team from kickoff to handoff — one accountable point of contact, plain-language findings, and recommendations sized for your organization.
How it works
Start the monthly program through Stripe.
Agree scope, systems, access and patch policy.
Scan, triage, patch-priority list and remediation tracking.
Monthly report and check-in with your advisor.
Questions
Is there a long-term contract?
No. The program is billed monthly and you can cancel ahead of your next billing date.
Do you apply the patches yourselves?
Your advisor sets priorities and tracks remediation. Patches are applied by your IT team or managed provider, or hands-on remediation can be scoped separately.
What systems are covered?
The in-scope systems are agreed during onboarding and documented, so it is clear what is and is not covered.
Will this make us compliant?
No program alone makes you compliant. It supports the vulnerability management controls most frameworks expect, and its records can be used as evidence.
What do you need from us?
A point of contact, agreed access for scanning, and a regular slot for the monthly check-in.
Patch & Vulnerability Management Program
An ongoing, senior-led program that keeps known vulnerabilities found, prioritized and closed — every month, not just after an incident.
$997/month
Service descriptions reflect general industry practice. Nothing on this page is a compliance determination, a certification, a license, or a guarantee of any outcome. Final scope is confirmed with you in writing before work begins.
