Remediation of computer security vulnerabilities

A remediation server comprising:

• a processor;
• a network interface configured to communicatively couple the processor to a client computing device;
• a memory having stored therein software instructions executable by the processor, and configured when executed to instruct the processor to:
• receive a list of known unpatched security vulnerabilities;
• scan the client computing device to determine whether the client computing device is subject to a known vulnerability;
• upon identifying a vulnerability for the client computing device, retrieve from the payload repository a self-healing payload configured to remedy the vulnerability;
• gain access to the client computing device through the security vulnerability;
• and
• use the access to deploy the self-healing payload on the client computing device.

A method of remedying computer security vulnerabilities, the method comprising:

• identifying a security vulnerability on a computing device, identification occurring before day DN;
• preparing a self-healing payload configured to reduce risk to the computing device from the vulnerability;
• and
• deploying the self-healing payload to the computing device by gaining access to the computing device through the security vulnerability and causing the self-healing payload to take remedial action.