Teravul
Teravul is an enterprise vulnerability management platform for security teams and defenders.
What Teravul is
Teravul is an enterprise vulnerability management platform for security teams and defenders. It combines scanner results by fingerprinting findings and grouping duplicates into canonical records, then prioritizes them with a tunable 12-factor risk score. The score includes CVSS, daily EPSS, CISA KEV, asset criticality, and internet exposure. Remediation features include policy-driven SLAs, multi-level escalation, and two-way synchronization with Jira and ServiceNow. Listed scanner integrations include Qualys, Tenable, Nessus, Rapid7, OpenVAS, Snyk, Trivy, Grype, Semgrep, SonarQube, Checkov, Gitleaks, Burp Suite, OWASP ZAP, and SARIF. Workflow connections include Jira, ServiceNow, GitHub Issues, Slack, Microsoft Teams, PagerDuty, and webhooks. Reporting provides posture grades, MTTR and SLA scorecards, mapping across eight compliance frameworks, evidence export, and TVQL dashboards. Teravul supports web, API, and hybrid deployment. Enterprise adds self-hosting for on-premises, private-cloud, or air-gapped environments. Every plan has a 14-day trial with full tier access and no credit card required; pricing is custom-quoted.
Good
- Correlates duplicate scanner findings
- Tunable 12-factor risk scoring
- Policy SLAs and escalation
- Two-way Jira and ServiceNow sync
- 14-day full-access trial
Watch out
- Pricing is custom-quoted
- Dashboard uploads limited to 100 MB
- Self-hosting is Enterprise-only
- No agent-based assessment
Who it suits
It suits security teams and defenders managing vulnerability programs across varied scanners and remediation workflows. Enterprise users can deploy it in on-premises, private-cloud, or air-gapped environments.
Verdict
Teravul connects vulnerability detection, prioritization, remediation, and compliance reporting in one platform. Its broad integrations and deployment options are balanced by custom pricing and the stated upload and assessment limits.
Plans and prices
From Teravul's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Enterprise | Priced on request | 100,000+ endpoints · unlimited users · up to 7 years finding history · self-hosted deployment option · Custom-quoted based on endpoint count, user requirements, and deployment needs |
| Growth | Priced on request | Up to 25,000 endpoints · up to 50 users · unlimited scanner integrations · 24 months finding history · Custom-quoted based on endpoint count, user requirements, and deployment needs |
| Starter | Priced on request | Up to 5,000 endpoints · up to 10 users · 3 scanner integrations · 12 months finding history · Custom-quoted based on endpoint count, user requirements, and deployment needs |
The facts
Each one read from Teravul's own pages, with the date it was checked.
What it does
- Access controls
- The site lists OIDC SSO, two-factor authentication, ten RBAC roles, multi-tenancy, API keys, and webhooks.checked 8 Oct 2026
- API and imports
- The documentation gives the API base URL as https://api.teravul.com/v1 and lists CSV, XLSX, JSON, SARIF 2.1, XML, CycloneDX, and SPDX import formats; dashboard uploads are limited to 100 MB.checked 8 Oct 2026
- Correlation
- It fingerprints and correlates scanner results to combine duplicates into canonical findings.checked 8 Oct 2026
- Intended users
- Teravul says its platform is built for security teams and defenders managing vulnerability programs.checked 8 Oct 2026
- Purpose
- Teravul describes itself as an enterprise vulnerability management platform that closes the loop from detection to fix.checked 8 Oct 2026
- Remediation
- The platform supports policy-driven SLAs, multi-level escalation, and two-way Jira and ServiceNow synchronization.checked 8 Oct 2026
- Reporting and compliance
- The product offers posture grades, MTTR and SLA scorecards, compliance mapping across eight frameworks, evidence export, and custom dashboards using TVQL.checked 8 Oct 2026
- Risk scoring
- Its 12-factor risk score includes CVSS, daily EPSS, CISA KEV, asset criticality, and internet exposure, with weights tunable per tenant.checked 8 Oct 2026
- Scanner integrations
- The site lists Qualys, Tenable, Nessus, Rapid7, OpenVAS, Snyk, Trivy, Grype, Semgrep, SonarQube, Checkov, Gitleaks, Burp Suite, OWASP ZAP, and SARIF.checked 8 Oct 2026
- Sealed scanning
- Teravul says Sealed Scan Pods scan code in short-lived pods with no network access and a read-only filesystem, destroy the workspace after a scan, and provide an HMAC-signed receipt.checked 8 Oct 2026
- Self-hosting
- Self-hosted deployment is available on the Enterprise plan, including on-premises, private cloud, or air-gapped environments.checked 8 Oct 2026
- Support
- Starter includes email support with a 24-hour response; Growth includes priority support with a four-hour response and a CSM; Enterprise includes 24/7 premium support and a TAM.checked 8 Oct 2026
- Workflow integrations
- The site lists Jira, ServiceNow, GitHub Issues, Slack, Microsoft Teams, PagerDuty, and webhooks.checked 8 Oct 2026
Money
- Trial
- Every plan includes a 14-day free trial with full access to that tier's features and no credit card required.checked 8 Oct 2026
Alternatives to Teravul
- 1
UpGuard
Free planAndroidiOSWebAPI8.2From $1,750 a month - 2
OWASP DefectDojo
Free planOpen sourceWebAPILinuxSelf-hosted8.0$100 usage-based - 3
ManageEngine Vulnerability Manager Plus
Free planWebAPILinuxmacOS7.9From $695 a year - 4
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 5
Intruder
Free planWebAPILinuxmacOS7.4Free plan - 6
OWASP DevGuard
Free planWebAPILinuxmacOS7.0From €449.10 a month