In our 22-criteria evaluation of vulnerability risk management (VRM) providers, we identified the 12 most significant ones — Beyond Security, BeyondTrust, Digital Defense, IBM, Kenna Security, NopSec, Qualys, Rapid7, Skybox Security, Symantec, Tenable, and Tripwire — and researched, analyzed, and scored them. This report shows how each provider measures up and helps security and risk (S&R) professionals make the right choice.