What Vicarius is
Vicarius is just a straight up better version of most legacy vulnerability scanners. They have great agent based scanning, reporting, and prioritization for endpoints, but are not as advanced on the cloud or kubernetes side. The vendor site is vicarius.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Vicarius covers
Vicarius is in the catalog for these capabilities. Categories: Vulnerability Management. Catalog tags: Best for Enterprise.
How to evaluate Vicarius in a security program
Use Vicarius as a stack candidate, not as diligence evidence. The oneNorma score for Vicarius is 5.3/10 (percentile 57). If the real gap is in Vulnerability Management, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what vicarius.io publishes. Contrast it with pentesting and Security Cloud & Compliance.
