Managing software vulnerabilities

A method comprising:

• selecting a snapshot image of a production machine for software vulnerability identification based at least in part on a first timestamp associated with the snapshot image being after a second timestamp associated with a software vulnerability;
• retrieving the snapshot image from a database that is separate from the production machine, the snapshot image corresponding to a first virtual machine of the production machine and including first software information for the first virtual machine;
• processing the snapshot image to determine that the first software information includes the software vulnerability based at least in part on a comparison of the first software information to a set of software vulnerabilities that includes the software vulnerability;
• identifying whether first patch information associated with a first software module and corresponding to the software vulnerability is available based at least in part on the determination, the first patch information for remediating the software vulnerability that corresponds to the first software information;
• and
• pushing the first patch information to the production machine based on identifying that the first patch information for remediating the software vulnerability is available.

A machine-storage medium and storing a set of instructions that, when executed by a processor, causes a machine to perform operations comprising:

• selecting a snapshot image of a production machine for software vulnerability identification based at least in part on a first timestamp associated with the snapshot image being after a second timestamp associated with a software vulnerability;
• retrieving the snapshot image from a database that is separate from the production machine, the snapshot image corresponding to a first virtual machine of the production machine and including first software information for the first virtual machine;
• processing the snapshot image to determine that the first software information includes the software vulnerability based at least in part on a comparison of the first software information to a set of software vulnerabilities that includes the software vulnerability;
• identifying whether first patch information associated with a first software module and corresponding to the software vulnerability is available based at least in part on the determination, the first patch information for remediating the software vulnerability that corresponds to the first software information;
• and
• pushing the first patch information to the production machine based on identifying that the first patch information for remediating the software vulnerability is available.