DEV Community

Brandon Sooknanan profile picture

Brandon Sooknanan

Founder of Varaxon Technologies. I built Scan Hub, which turns vulnerability scan exports into clear, evidence-linked client reports. Into cybersecurity, automation, and making complex work easier to

Work

CEO at Varaxon Technologies LLC

Track CISA KEV additions and EPSS scores with curl and jq

Track CISA KEV additions and EPSS scores with curl and jq

Comments
3 min read
8 free security tools for IT teams: CVE, DMARC, SPF, DKIM and MX checks (no sign-up)

8 free security tools for IT teams: CVE, DMARC, SPF, DKIM and MX checks (no sign-up)

Comments
4 min read
Is this CVE actually being exploited? Check KEV, EPSS and CVSS in under a minute

Is this CVE actually being exploited? Check KEV, EPSS and CVSS in under a minute

Comments
3 min read
How to test a vulnerability reporting tool in 14 days

How to test a vulnerability reporting tool in 14 days

Comments
4 min read
Turning vulnerability scan results into billable remediation work

Turning vulnerability scan results into billable remediation work

Comments
3 min read
Fixed, accepted or ticketed: close the loop on every vulnerability finding

Fixed, accepted or ticketed: close the loop on every vulnerability finding

Comments
4 min read
What's new in Varaxon Scan Hub: October 2026

What's new in Varaxon Scan Hub: October 2026

Comments
4 min read
Proof pack: evidence of your vulnerability work for audits, insurers and renewals

Proof pack: evidence of your vulnerability work for audits, insurers and renewals

Comments
5 min read
Can someone fake your email? A free SPF, DKIM and DMARC check, graded A to F

Can someone fake your email? A free SPF, DKIM and DMARC check, graded A to F

Comments
5 min read
Proof of fix: show clients what you fixed since the last scan

Proof of fix: show clients what you fixed since the last scan

Comments
3 min read
Varaxon Scan Hub is now on the ConnectWise Marketplace and Microsoft Marketplace

Varaxon Scan Hub is now on the ConnectWise Marketplace and Microsoft Marketplace

Comments
3 min read
A Critical CVE Just Dropped. What MSPs Should Do in the First 48 Hours

A Critical CVE Just Dropped. What MSPs Should Do in the First 48 Hours

Comments
3 min read
End-of-Life Software in Vulnerability Reports: What to Do When There's No Patch Coming

End-of-Life Software in Vulnerability Reports: What to Do When There's No Patch Coming

Comments
3 min read
Your First Vulnerability Scan for a New Client: A Baseline That Sets the Tone

Your First Vulnerability Scan for a New Client: A Baseline That Sets the Tone

Comments
3 min read
Internal vs External Vulnerability Scans: What Each One Tells You

Internal vs External Vulnerability Scans: What Each One Tells You

Comments
3 min read
Risk Acceptance: How to Document a Vulnerability Your Client Won't Fix

Risk Acceptance: How to Document a Vulnerability Your Client Won't Fix

Comments
3 min read
False Positives in Vulnerability Scans: How to Verify Them Without Hiding Real Risk

False Positives in Vulnerability Scans: How to Verify Them Without Hiding Real Risk

Comments
4 min read
How to turn a vulnerability scan export into a client-ready report

How to turn a vulnerability scan export into a client-ready report

Comments
4 min read
Vulnerability management for MSPs: cadence, reporting and QBRs

Vulnerability management for MSPs: cadence, reporting and QBRs

Comments
3 min read
Vulnerability remediation timelines: how to set SLAs for clients

Vulnerability remediation timelines: how to set SLAs for clients

Comments
3 min read
What a vulnerability assessment report should include (with a template)

What a vulnerability assessment report should include (with a template)

Comments
3 min read
Why your OpenVAS PDF report is missing CVEs (and how to fix it)

Why your OpenVAS PDF report is missing CVEs (and how to fix it)

Comments
3 min read
How to read a Nessus scan report (and turn it into a client report)

How to read a Nessus scan report (and turn it into a client report)

Comments
5 min read
CVSS vs EPSS vs CISA KEV: how to prioritize vulnerabilities

CVSS vs EPSS vs CISA KEV: how to prioritize vulnerabilities

Comments
4 min read
Vulnerability scan vs penetration test: what's the difference?

Vulnerability scan vs penetration test: what's the difference?

Comments
3 min read
How often should you run vulnerability scans? PCI DSS, HIPAA, CIS and insurance

How often should you run vulnerability scans? PCI DSS, HIPAA, CIS and insurance

Comments
3 min read
Credentialed vs non-credentialed vulnerability scans: what changes in your report

Credentialed vs non-credentialed vulnerability scans: what changes in your report

Comments
3 min read
The Vulnerability Scanner Is Not the Hard Part. The Handoff Is.

The Vulnerability Scanner Is Not the Hard Part. The Handoff Is.

Comments
4 min read
Before You Trust a Vulnerability Report, Check This Page First

Before You Trust a Vulnerability Report, Check This Page First

Comments
2 min read
“No Findings” Does Not Always Mean “Secure”

“No Findings” Does Not Always Mean “Secure”

Comments
2 min read
What to Check Before Turning a Vulnerability Scan Into a Client Report

What to Check Before Turning a Vulnerability Scan Into a Client Report

Comments
2 min read
loading...