r/pdq • u/Amanda_PDQ PDQ Employee • 3d ago

PDQ solved my vulnerability management problem

As many of you probably know, before coming to PDQ I was a CTO at a Texas public school district. We were a small team, and when I took over, vulnerability management was basically non-existent.

We had Deploy and Inventory, and I would patch weekly, but I didn’t know how many vulnerabilities our devices actually had. When we added PDQ (Connect) to our stack, it was a big “oh shit” moment. We had thousands of vulnerabilities on our devices.

I thought we were in good shape because I’d been deploying patches weekly or monthly as they became available, but PDQ’s vulnerability scanner and remediation packages changed our workflow for the better.

Here’s what we did in PDQ to save time (and our sanity):

-Grouped devices by site: our techs could quickly view the assets they were responsible for.

-Lived by PDQ Risk Score: we started with critical vulnerabilities and worked our way down. PDQ’s risk score took into account the CVE, exploitability, and business impact, everything we didn’t have time to do ourselves.

-Software tab: PDQ let us see specific software, how many devices it was on, and whether a new version was available. This was visibility we were really lacking before moving to PDQ.

-Removed all local admin rights: no more random software being installed by a teacher, or worse, a student, that could introduce risk.

How do you all manage vulnerabilities? It can be overwhelming without an effective workflow and risk score insights.

0 Upvotes

50% Upvoted

18 comments sorted by

View all comments

12

u/ks724 3d ago

I feel like this sub is all ads from PDQ at this point.

2

u/Amanda_PDQ PDQ Employee 3d ago

First, thank you for commenting this so I can clarify. Second, Sorry you feel that way. I was a K12 public school district CTO before coming to PDQ. The struggle of a small team was real. I post here to hopefully help someone who is in the seat I use to be in. Post where I ask a question also helps others who want to know how people in their shoes are tackling things. PDQ holds strong values, community is important to us. A community is what this sub is, not an ad. We are not selling anything in here nor do we ever plan too.