PMAP

What PMAP is

PMAP is an enterprise vulnerability management platform for coordinating scans and tracking security findings through remediation. It connects to 30 vendor connectors across nine categories, including vulnerability scanners, DAST, SAST, SCA, ITSM, and CI/CD. Teams can launch, schedule, import, pause, resume, and stop scans, with live status updates for running scans. PMAP correlates results by scanner reference and SHA-1 fingerprint to merge duplicate findings across scanners on the same asset. It can reopen closed findings while retaining status history. Findings move through an enforced lifecycle with owners, severity-based SLA deadlines, escalation, and optional four-eyes closure approval. The platform supports holding-company and subsidiary structures with scoped tenant boundaries and custom roles. It integrates with Jira, ServiceNow, and ManageEngine for ticketing, and several named CI/CD tools. Configurable dashboards, risk scoring, and six report types support analysis; reports can be produced as PDF, DOCX, or HTML and signed with a SHA-256 hash and QR verification link. Its compliance posture lists SOC 2 Type II as in progress, ISO 27001 controls as aligned, and GDPR readiness with regional data residency.