TotalHealManaged VulnerabilityManaged Vulnerability Services
We run VulnSight across your devices and servers, CloudPosture across your cloud accounts, rank what matters with the known-exploited list, drive the fixes through PatchPilot in your change windows, and show the risk going down month by month.
Why organisations ask for it
A scan finds thousands of vulnerabilities and nobody has time to decide which ten matter. Patches wait for change windows that never come, and exceptions are agreed in e-mail and forgotten. Managed Vulnerability turns findings into a short, ranked list and works it to closure.
A short list, not a long report
Findings ranked by exploitation in the wild (the CISA KEV catalogue), exposure and asset importance.
Fixes that actually happen
Patch campaigns through PatchPilot inside your change windows, with your approval before anything is deployed.
Accepted risk, on record
Every risk acceptance has a reason, an expiry of at most a year and a second approver — never an e-mail thread.
Proof for auditors
Monthly trend of open, fixed and overdue findings by severity, with evidence from the console.
What our team does
Discover and scan
- Keep the device and software inventory complete with the TotalHeal agents
- Match the software the agents report against the vulnerability knowledge base continuously; check cloud accounts with CloudPosture
- Raise new critical findings to you the same day
Prioritise
- Rank by known exploitation, exposure and how important the asset is to you
- Group findings into fixes: one patch often closes dozens
- Agree a fix-by date per severity with you
Fix
- Build patch campaigns in PatchPilot and run them in your change windows, after your approval
- Track failed installs and retry or escalate them
- Write workaround steps where no patch exists yet
Govern
- Record risk acceptances with a reason, an expiry and a second approver
- Chase overdue fixes with the owners you name
- Prove each fix from the next inventory report
Your price — order and pay
Prices in Indian rupees, GST extra. Paid in advance: pay online, ask for a payment link, or take a proforma for your purchase order. Onboarding starts within one working day of payment.
- Monthly authenticated scans
- Fixes prioritised by known exploitation
- Patch follow-up with your team
- Monthly report
A larger or custom scope? Size it for a quote
Several sites, special coverage hours or extra add-ons: enter your estate and choices, see the scope and the TotalHeal licences it needs, and send it to us — we reply with a quote.
What you receive
Critical finding alert
A new known-exploited or critical finding on your estate, with the fix.
Fix plan
The ranked list of fixes for the next change window, for your approval.
Vulnerability report
Open, fixed and overdue by severity; time to fix against target; accepted risks due for review.
Review
Trends, recurring causes (old images, unmanaged software) and what to change.
Runs on TotalHeal products
The service works in your own TotalHeal console, on products that are available today.
How an engagement runs
Order and pay — or ask for a quote
Choose the plan and size on this page and pay in advance (online, a payment link or a proforma for your purchase order); for a custom scope, size it below and we send a quote. Either way you get the written service terms: coverage hours, response targets and runbooks.
Give consent
Your administrator accepts TotalHeal’s provider link in your own console. Until then we have no access. Every action we take is recorded in your audit trail and ours, and you can end the link at any time.
Onboard
We enrol agents, connect your sources, agree the escalation contacts and the actions we may take without asking, and tune the policies to your environment.
Run
The service runs in your TotalHeal console, so you see exactly what our analysts see and do, as it happens.
Report and review
Scheduled reports by e-mail and PDF, and a regular review with your team of what happened, what was done and what to change.
What we need from you
- An administrator to accept the provider link
- Your change windows and who approves a patch campaign
- Owners for each group of systems
- The systems that must never restart without notice