Vicarius
Vulnerability scanner software
DevSecOps software
- Features
- Ease of use
- Ease of management
- Quality of support
- Affordability
- Market presence
Take the quiz to check if Vicarius and its alternatives fit your requirements.
$4 per asset per month
Free Trial
Free version unavailable
Small
Medium
Large
- Construction
- Agriculture, fishing, and forestry
- Real estate and property management
What is Vicarius
Vicarius is a vulnerability management and remediation platform focused on identifying software vulnerabilities and reducing exposure through prioritization and mitigation workflows. It is used by security and IT operations teams to inventory assets, assess vulnerability risk, and coordinate remediation across endpoints and servers. A key differentiator is its emphasis on “patchless” mitigation options (virtual patching) alongside traditional patch deployment and ticketing/integration workflows.
Patchless mitigation options
The platform supports mitigation approaches that do not require immediately applying vendor patches, which can help when patches are unavailable or operationally risky. This is useful for legacy applications and constrained maintenance windows. It provides an alternative path to reduce exploitability while longer-term remediation is planned.
Prioritization and remediation workflow
Vicarius combines vulnerability findings with prioritization to help teams focus on issues that are more likely to be exploited or have higher business impact. It supports remediation tracking and coordination rather than only reporting scan results. This aligns with operational needs where vulnerability management is measured by time-to-remediate, not just detection.
Integrations for security operations
The product is designed to fit into existing security and IT workflows via integrations (for example, ticketing and security tooling) to route remediation tasks. This reduces manual handoffs between security and IT operations. It also helps standardize processes across teams that manage different operating systems and application stacks.
Not a full DevSecOps suite
While it supports remediation workflows, Vicarius is not primarily a CI/CD-native DevSecOps platform for build-time testing and policy enforcement. Organizations that need deep pipeline controls, code scanning, and developer-centric workflows may require additional tools. This can increase toolchain complexity for engineering-led security programs.
Coverage depends on environment
Effectiveness varies based on the operating systems, third-party applications, and asset types in scope, as well as the available connectors and agents. Some environments (for example, highly customized images or specialized appliances) may require extra configuration or may not be fully supported. Buyers typically need to validate coverage against their specific software inventory.
Virtual patching governance needs
Patchless mitigation can introduce governance requirements to ensure mitigations are tracked, tested, and eventually replaced by permanent fixes. Teams may need clear policies to avoid accumulating long-lived mitigations that mask underlying patch hygiene issues. This adds process overhead compared with straightforward patch deployment programs.
Plan & Pricing
| Plan | Price | Key features & notes |
|---|---|---|
| Basic | $4 per asset/month (monthly) — example: $400/month for 100 assets | 14-day free trial; includes 100 workstations & servers (example), risk management, unlimited patch deployment, network scanner, unlimited automation & scripting, reporting & analytics; 20% off when billed yearly (site shows yearly toggle). |
| Essential | $5 per asset/month (monthly) — example: $500/month for 100 assets | 14-day free trial; includes same core features as Basic in example, with additional capabilities relative to Basic; 20% off when billed yearly. |
| Custom (Enterprise) | Scope-based / custom pricing (contact sales) | Access all features; expanded protection for unlimited assets, patchless protection, deployment in additional environments (EU or APAC); requires scoping call. |
Seller details
Vicarius Ltd.
New York, NY, USA
2016
Private
https://www.vicarius.io/
https://x.com/vicariusinc
https://www.linkedin.com/company/vicarius/
