What Avalor is
Acquired by ZScaler. Avalor creates a platform for the vulnerability fixes you're probably coding yourself. They offer an elegant no/low code approach for uniting all of your vulnerability data in one place. Their approach heavily relies on the flexibility of their data standardization. The vendor site is www.avalor.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Avalor covers
Avalor is in the catalog for these capabilities. Categories: Vulnerability Management. Catalog tags: Acquired.
How to evaluate Avalor in a security program
Use Avalor as a stack candidate, not as diligence evidence. The oneNorma score for Avalor is 5.5/10 (percentile 65). If the real gap is in Vulnerability Management, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.avalor.io publishes. Contrast it with pentesting and Security Cloud & Compliance.
