Systems and methods for managing cyber vulnerabilities

A method, comprising:

• using a cloud provider API, accessing a block storage volume of a workload maintained in a cloud storage environment;
• identifying an installed software application in the accessed block storage volume;
• analyzing the identified installed software application to determine an associated software version;
• accessing a data structure of known software vulnerabilities for a plurality of versions of software applications;
• performing a lookup of the identified installed software version in the data structure to identify known vulnerabilities;
• and
• use network accessibility information and at least one port to identify one or more of the known and identified vulnerabilities susceptible to attack from outside the workload, wherein the network accessibility information includes at least one of:
• data from an external data source, cloud provider information, or at least one network capture log.

A non-transitory computer-readable medium storing instructions that, when executed by at least one processor, are configured to cause the at least one processor to perform operations comprising:

• using a cloud provider API, accessing a block storage volume of a workload maintained in a cloud storage environment;
• identifying an installed software application in the accessed block storage volume;
• analyzing the identified installed software application to determine an associated software version;
• accessing a data structure of known software vulnerabilities for a plurality of versions of software applications;
• and
• use network accessibility information and at least one port to identify one or more of the known and identified vulnerabilities susceptible to attack from outside the workload, wherein the network accessibility information includes at least one of:
• data from an external data source, cloud provider information, or at least one network capture log.