WorkNest Secure has expanded its GuardNest platform with continuous vulnerability scanning, giving organisations ongoing visibility into security weaknesses rather than relying solely on periodic penetration tests.

The new capability is designed to help businesses monitor vulnerabilities across internet-facing systems, web applications, and internal environments, providing continuous oversight of their attack surface as threats and infrastructure evolve.

The launch comes as organisations face increasing pressure from customers, insurers, and regulators to demonstrate continuous vulnerability management and stronger cyber resilience.

Moving beyond annual penetration testing

While penetration testing remains a critical part of any cybersecurity strategy, WorkNest Secure says annual or point-in-time assessments no longer provide a complete picture of an organisation’s security posture.

The enhanced GuardNest platform combines automated vulnerability scanning with expert analysis and remediation support, allowing organisations to identify vulnerabilities as they emerge and prioritise the issues that present the greatest business risk.

Organisations can schedule scans, monitor vulnerabilities in real time, and manage remediation activities through a single dashboard.

The platform now supports external vulnerability scanning, internal vulnerability scanning, web application scanning, and agent-based internal scanning, allowing customers to tailor the service to their environment and compliance requirements.

Simplifying vulnerability management

Alongside continuous scanning, GuardNest introduces new remediation workflows designed to help security and IT teams manage vulnerabilities more effectively.

Organisations can assign remediation tasks, define service level targets based on vulnerability severity, and track progress through to resolution. Automated escalation and SLA tracking are intended to ensure vulnerabilities are actively managed rather than simply recorded in reports.

The platform also includes live dashboards, historical trend reporting, and automated reporting that can support compliance initiatives, cyber insurance renewals, customer due diligence, and certifications including ISO 27001, Cyber Essentials Plus, and PCI DSS.

Helping organizations focus on what matters

Kirsty Fowler, Managing Director of WorkNest Secure, said organisations need greater visibility into their cyber risks as environments continue to change.

“Cyber threats do not operate to an annual schedule, yet many organisations are still relying on point-in-time assessments to understand their security posture,” Fowler said.

“New vulnerabilities emerge every day and infrastructure changes constantly, so businesses need visibility of their risks as they exist today, not six months ago.”

She added that the new functionality is intended to reduce the complexity of vulnerability management by combining automation with expert support.

“By combining automated scanning with expert support and practical remediation guidance, we help organisations cut through the noise, understand what matters most, and know exactly where action is needed,” Fowler said.

Responding to changing security needs

The launch reflects a broader shift in how organisations approach cybersecurity investment, with many moving away from one-off security projects in favour of continuous monitoring and ongoing risk management.

WorkNest Secure said the new functionality is available immediately either as a standalone vulnerability management service or as part of existing GuardNest packages.

The latest release builds on the redesign of the GuardNest platform in 2025, which introduced a more collaborative and user-friendly approach to vulnerability management, penetration testing, and remediation.

The post WorkNest Secure Launches Continuous Vulnerability Scanning with GuardNest appeared first on IT Security Guru.

Forescout Technologies Inc. has been added to the NATO Information Assurance Product Catalogue (NIAPC), marking formal recognition that the company’s cybersecurity platform meets NATO’s information assurance requirements for deployment across mission-critical defence environments.

Maintained by the NATO Communications and Information Agency (NCIA), the NIAPC serves as a trusted catalogue of cybersecurity technologies that have been validated for use by NATO military and civilian organisations. Inclusion demonstrates that Forescout’s platform satisfies the alliance’s stringent standards for protecting classified networks while supporting operational readiness.

The recognition comes as defence organisations face increasingly sophisticated cyber threats targeting converged IT, operational technology (OT) and mission systems. As military environments become more connected, maintaining visibility across every connected device and responding quickly to threats has become a growing operational challenge.

Forescout’s platform continuously discovers and classifies managed and unmanaged assets across IT, OT, IoT and mission environments before applying Universal Zero Trust Network Access (UZTNA) principles and dynamic network segmentation to contain threats and restrict lateral movement.

The company says its agentless approach enables organisations to gain visibility across complex environments without requiring extensive network redesign or operational disruption. It also provides centralised visibility and policy enforcement across distributed networks, including support for unclassified, restricted and secret environments.

“Being included in the NIAPC marks a significant milestone for Forescout and reinforces our ability to support the most demanding defence environments worldwide,” said Barry Mainz, CEO of Forescout. “Our platform supports defence teams with a unified, real-time view of every device across IT and OT environments, enabling faster decisions, automated response to anomalies and secure operations. Following our experience in the Locked Shields exercise, we’re proud to bring proven, mission-ready capabilities to NATO and its partners.”

The announcement follows Forescout’s participation in NATO’s Locked Shields exercise, the world’s largest live-fire cyber defence exercise, where participating teams test their ability to defend critical infrastructure under simulated attack.

The company’s inclusion in the NIAPC also reflects a wider shift across defence and critical national infrastructure towards security architectures that extend beyond traditional IT estates. Modern zero trust approaches increasingly require continuous visibility across operational technology, industrial systems and connected devices to reduce blind spots and strengthen resilience.

Forescout will showcase its defence security capabilities at NATO Edge 26, which takes place in Izmir, Turkey, from 17 to 19 November.

The post Forescout recognised by NATO for cybersecurity capabilities across IT and OT environments appeared first on IT Security Guru.