Vulnerability Management | VMDR

What we use your personal data for	Our reasons
Creating and managing your account with us	To perform our contract with you or to take steps at your request before entering into a contract
Providing products and/or services to you	To perform our contract with you or to take steps at your request before entering into a contract
Conducting checks to identify you and verify your identity or to help prevent and detect fraud against you or us	To comply with our legal and regulatory obligations
Enforcing legal rights or defend or undertake legal proceedings	Depending on the circumstances: — to comply with our legal and regulatory obligations — in other cases, for our legitimate interests, i.e. to protect our business, interests and rights
Customising our website and its content to your particular preferences based on a record of your selected preferences or on your use of our website	Depending on the circumstances: — your consent as gathered e.g., by the separate cookies tool on our website—see ‘Cookies and other tracking technologies’ below — where we are not required to obtain your consent and do not do so, for our legitimate interests, i.e., to be as efficient as we can so we can deliver the best service to you at the best price If you have provided such a consent, you may withdraw it at any time by changing the setting on the cookies tool (this will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn)
Retaining and evaluating information on your recent visits to our website and how you move around different sections of our website for analytics purposes to understand how people use our website so that we can make it more intuitive or to check our website is working as intended	Depending on the circumstances: — your consent as gathered by the separate cookies tool on our website]—see ‘Cookies and other tracking technologies’ below — where we are not required to obtain your consent and do not do so, for our legitimate interests, i.e., to be as efficient as we can so we can deliver the best service to you at the best price If you have provided such a consent you may withdraw it at any time by clearing your cookie settings and rejecting when you revisit our website (this will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn)
Communications with you not related to marketing, including about changes to our terms or policies or changes to the products AND/OR services or other important notices	Depending on the circumstances: — to comply with our legal and regulatory obligations — in other cases, for our legitimate interests, i.e., to be as efficient as we can so we can deliver the best service to you at the best price
Protecting the security of systems and data used to provide the services	To comply with our legal and regulatory obligations We may also use your personal data to ensure the security of systems and data to a standard that goes beyond our legal obligations, and in those cases our reasons are for our legitimate interests, i.e., to protect systems and data and to prevent and detect criminal activity that could be damaging for you and/or us
Statistical analysis to help us understand our customer base	For our legitimate interests, i.e., to be as efficient as we can so we can deliver the best service to you at the best price
Updating and enhancing customer records	Depending on the circumstances: — to perform our contract with you or to take steps at your request before entering into a contract — to comply with our legal and regulatory obligations — where neither of the above apply, for our legitimate interests, e.g., making sure that we can keep in touch with our customers about existing orders and new products
Disclosures and other activities necessary to comply with legal and regulatory obligations that apply to our business, e.g. to record and demonstrate evidence of your consents where relevant	To comply with our legal and regulatory obligations
Marketing our services to existing and former customers	For our legitimate interests, i.e., to promote our business to existing and former customers See ‘Marketing’ below for further information
The audit of our ISO certifications (to the extent not covered by ‘activities necessary to comply with legal and regulatory obligations’ above)	For our legitimate interests, i.e., to maintain our accreditations so we can demonstrate we operate at the highest standards
To share your personal data with members of our group and third parties that will or may take control or ownership of some or all of our business (and professional advisors acting on our or their behalf) in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency. In such cases information will be anonymised where possible and only shared where necessary	Depending on the circumstances: — to comply with our legal and regulatory obligations — in other cases, for our legitimate interests, i.e., to protect, realise or grow the value in our business and assets

Recipient	Processing operation (use) by recipient	Relevant categories of personal data transferred to recipient
Google	We use Google Analytics (GA4) cookies to collect data about the visitors to the site which includes the number of visitors, session duration, pages visited during the session etc. and whether visitors return. Google Analytics will assign a unique “ID” to a user of the boxxe website at the point they register an account with us for the purpose of tracking their activity on the boxxe website. This information is anonymous and cannot be used to identify you personally unless you end up becoming a boxxe customer. Google Analytics cannot use the ID to work out who you are.	Device’s IP address (processed during your session and stored in a de-identified form) geographic location (country only), and the preferred language used to display our website. Google Analytics stores this information on our behalf in a pseudonymized user profile.
Hotjar Ltd	We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. Hotjar is contractually forbidden to sell any of the data collected on our behalf.	This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile.
Klevu	Klevu offers a machine learning algorithm which takes several parameters into account when establishing what a customer may like and eventually buy on the store. Javascript keeps track of what customers are searching for and visiting. These products visited by these customers and any recent search queries fired by them are used as a context to the search queries fired by them. Klevu perform semantic and statistical analysis of this data to identify the intent and to build multiple, product-noun (e.g. bag, shoe, chair) specific profiles of preferences. Klevu also employs a method called collaborative filtering, which involves analyzing the history of other customers who have or had performed similar searches and visited products similar to the products visited by the current customer. Only those products that are relevant to the current search query are picked up and analyzed to identify common factors within them.	Device’s IP address (processed during your session and stored in a de-identified form) geographic location (country only), and the preferred language used to display our website. Klevu stores this information on our behalf in a pseudonymized user profile.
Dotdigital	Dotdigital is a SaaS cross-channel marketing automation platform and services provider that helps brands devise successful, personalized marketing campaigns across multiple channels (e.g. email). Paired with its Microsoft Dynamics 365 CRM integration, boxxe is able to deliver tailored marketing to its customers.	Contact data (such as email address, contact number, name or other contact details), marketing preferences, IP address and usage information (including online navigation data, location data and browser data).

Recipient country	Recipient	Processing operation (use) by recipient	Lawful safeguard
Ireland	Hotjar	Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile.	Adequacy regulation further to paragraph 5(1)(a) of Part 3 of Schedule 21 to the Data Protection Act 2018 https://www.hotjar.com/legal/support/dpa/
USA	Stripe Inc	In order to facilitate online payments through boxxe’s ecommerce portal, where applicable, Stripe may Process Payment Account Details, bank account details, billing/shipping address, name, date/time/amount of transaction, device ID, email address, IP address/location, order ID, payment card details, tax ID/status, unique customer identifier, identity information including government issued documents (e.g., national IDs, driver’s licenses and passports).	UK Data Transfer Addendum https://stripe.com/gb/legal/dpa
EEA	Vaimo	Vaimo has access to certain categories of boxxe customer personal data (names, addresses, DOB, email, number, location, device and diagnostic data, connection data), by virtue of hosting the boxxe website.	Adequacy regulation further to paragraph 5(1)(a) of Part 3 of Schedule 21 to the Data Protection Act 2018. Vaimo also has a legally valid intra-group agreement in place and no data is transferred to any entity who is not a party to it.
EEA	Dotdigital	Boxxe will provide certain information about its customers to Dotdigital in order for it to be able to provide automated marketing services that are tailored to its specific customer interests.	Adequacy regulation further to paragraph 5(1)(a) of Part 3 of Schedule 21 to the Data Protection Act 2018. https://dotdigital.com/terms/data-processing-agreement/


Access to a copy of your personal data	The right to be provided with a copy of your personal data
Correction (also known as rectification)	The right to require us to correct any mistakes in your personal data
Erasure (also known as the right to be forgotten)	The right to require us to delete your personal data—in certain situations
Restriction of use	The right to require us to restrict use of your personal data in certain circumstances, e.g. if you contest the accuracy of the data
Data portability	The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations
To object to use	The right to object: — at any time to your personal data being used for direct marketing (including profiling) — in certain other situations to our continued use of your personal data, e.g. where we use your personal data for our legitimate interests unless there are compelling legitimate grounds for the processing to continue or the processing is required for the establishment, exercise or defence of legal claims
Not to be subject to decisions without human involvement	The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you We do not make any such decisions based on data collected by our website
The right to withdraw consents	If you have provided us with a consent to use your personal data you have a right to withdraw that consent easily at any time You may withdraw consents by emailing ecommerce@boxxe.com Withdrawing a consent will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn

Home
Services & Solutions
Cybersecurity
Vulnerability Management, Detection & Response

Vulnerability Management, Detection & Response

Vulnerability Management, Detection and Response (VMDR) is an essential step for preventing data breaches and other cyber attachs

Certified IT solutions and services
Tailored to your company's needs
24/7 company account access
Client-approved solutions

Find your weak spots before anyone else does, with vulnerability management

Weak spots in your IT security system are a natural in-road for hackers.

A data breach could result in financial loss and reputational damage, so the pressure is on to make your security watertight. However, we understand that this can be time-consuming and demands specialist resource.

That's where a comprehensive vulnerability management system comes into the picture. It involves identifying, assessing and reporting on flaws in your IT system, allowing experts to prioritise and handle issues swiftly through patch management and other techniques.

Ease your IT team's workload

Safeguard your IT infrastructure and ease your IT team's workload with boxxe. Our Vulnerability Management, Detection and Response service uses the Qualys Cloud Platform to provide regular vulnerability checks and identify exposure to 'known' vulnerabilities – the most frequent method used by hackers.

From a single application, boxxe can provide you with vulnerability discovery, assessments, detection and response.

How boxxe can help with threat and vulnerability management

Cloud technology

There's no need for bulky appliances, as everything is in the cloud and ready to run. With unlimited virtual scanners, you can remain agile to handle any threats.

Using a single cloud platform, organisations save significant resources and the time required to otherwise install multiple agents, multiple consoles and integrations.

Access to experts

By packaging the technology and expertise into a single offering, our VMDR unlocks several benefits for your business.

A single point of contact avoids integration headaches or delays. We will maintain the platform on your behalf, providing threat and vulnerability management as a comprehensive service.

boxxe helps your business stay protected

Helping your business stay protected

We work alongside Qualys for vulnerability management, helping to reduce business security exposure. We can build a roadmap for further improvement and provide a greater focus for security spend and resources. With our help, your business can stay one step ahead.

"Known vulnerabilities are one of the most common breakthroughs for hackers. A proactive approach is the only way to outsmart cybercriminals. VMDR scans your entire IT system to continuously identify and prioritise vulnerabilities, ensuring you keep your finger on the pulse. Combined with the expertise of our team, you can benefit from ongoing protection."

Andy Batty , Security Sales Specialist, boxxe

Why choose boxxe for VMDR solutions for your business?

Drawing on over 30 years of experience, we can help organisations embrace security not only to protect their business assets and sensitive data but also their reputation. Cybersecurity Services from boxxe can fully protect your business and feed all aspects of your digital and IT landscape.

Tailored solutions: We take the time to understand your specific needs because we appreciate that no two organisations are the same. From there, we can put an effective threat and vulnerability management strategy in place.
Certified experts: As we're ISO 27001 accredited security specialists, you can take comfort in our ability to protect your organisation by keeping your IT systems secure.
Innovative partners: Our partnerships with reputable names in the industry, such as Palo Alto Networks, mean we can offer pioneering solutions.
Client-approved: We've worked closely with our clients to achieve outstanding results – and we can do the same for you.

Case Studies

Our customers love our VMDR and cybersecurity services

“We received an excellent service from boxxe and greatly appreciated their flexibility in helping us achieve our aims for this project in a very limited time frame before the submarines went back out to sea. We have an additional four submarines which will require Flagstone installations during the next 12 months and fully intend to return for boxxe to do this for us.”

Mark Anthony , Network and Communications Manager, Tomahawk Strike

“Verisec has for several years aided UK municipalities with secure logins and solutions. The opportunity to contribute to the University’s digitisation is a great success for us. The new agreement became a reality by the assistance of one of our British partners. We look forward to being able to attract more universities and institutions in the public sector, in both the UK and other countries, in the future.”

Johan Henrikson , CEO, Verisec

“We have had excellent support from boxxe for many years. All the work done has been in accordance with MOD requirement, hence ensuring we maintain the required accreditations for MoD Contracts.”

Julian Floyd , Systems and IT Manager, Enterprise Control Systems Ltd

“NextWave partners play a critical role throughout the customer lifecycle, from the initial qualifying stage to ultimately ensuring successful deployment and adoption of our technology. As a NextWave Platinum Innovator, boxxe is a cybersecurity advisor our customers can trust.”

Tom Evans , VP of Worldwide Channel Sales, Palo Alto Networks

“Our customers require cyber experts that can help them achieve better security outcomes, protecting them from today’s sophisticated threats. Our Platinum Innovator NextWave partners have deep Palo Alto Networks expertise to help solve complex security challenges with robust solutions and services. As a NextWave Platinum Innovator, boxxe is helping redefine what it means to be secure.”

Patricia Murphy , VP EMEA & LATAM Ecosystems at Palo Alto Networks

“The installation of the Verkada camera system was simple and well supported by the team at Verkada and boxxe. Within days of installation, the cameras have proved their worth by identifying three intruders onto our site and proving the non-arrival of contractors on a day, thereby settling a dispute instantly.”

Clive Hetherington , CEO, Didcot Railway Centre

"We will likely experience a ransomware attack, and how we recover is going to be testament to our character and the controls we now have in place. Druva is a key part of that recovery plan. There are a lot of systems we could do without, but not Microsoft 365. It’s the heart of our business, and Druva ensures that data is secure so our company can continue serving our customers."

Hassan Bahrani , Head of IT, Thirteen Group

Vulnerability management FAQs

Why is it so important to have a vulnerability management system in place?

Cyber attacks can affect anyone at any time. With the development of AI and other sophisticated technology, they're set to rise. If an organisation is impacted by a cyber-attack it can have a wide set of consequences, such as identity theft, reputational damage and disruption to services.

While managed detection and response (MDR) can help repair and remediate after an incident has occurred, the purpose of VMDR is to integrate preventative measures through vulnerability management tools.

Sufficient VMDR can also support GDPR compliance by continually ensuring that you are protecting the organisation and any customer data.

What are the advantages of outsourcing vulnerability management services?

By outsourcing threat and vulnerability management, you can alleviate pressure on your in-house teams and allow them to focus on other pressing issues that will serve your organisation. Instead, you'll be delegating this important task to highly experienced specialists.

By filling the gaps that exist in your own resource, you won't need to spend time recruiting a team with the same standard of knowledge or pay for their ongoing training. Instead, you can invest in a comprehensive VMDR package that includes support from experts with extensive knowledge of the vulnerability management life cycle.

What role does a security scanner play in VMDR?

Scanners are used to identify weaknesses in systems and software that could lead to a security breach. Once something has been found, they flag these vulnerabilities and alert those who have issued the checks.

Regular scans mean you can adopt a more proactive approach to cyber threats and work towards remediation of these vulnerabilities through patch management and other methods.

How much do your vulnerability management services cost?

Due to our bespoke approach to matching each organisation's needs, providing an exact figure at this stage is tricky.

We offer a free security assessment that comes with a tailored report and recommendations. From there, you can decide whether you want to use our services and we can give you a better idea of how much this will cost.

To find out more about how we can help, get in touch.

Contact us

Protect your business with our vulnerability management, detection and response system today

Keen to learn more? Call us on the number below or fill in the form and we'll be in touch.

0330 236 9429

First name

Last name

Contact number

Email address

Company name

Sector

Institute

Message (optional)

I would like to receive news and updates:

by email

by SMS

Other cybersecurity services tailored to your needs

Security is the keystone of our services as it’s been our pedigree for more than 35 years. Services from boxxe can fully protect your business, and feed growth in all aspects of your digital and IT landscape. Explore more below.

Cybersecurity Risk Assessment

Our cybersecurity experts can give you the insights you need to prevent, detect and respond to threats. Book a free cybersecurity assessment today.

security

Cybersecurity Risk Assessment

Managed Endpoint Protection

Protect your endpoints from cyber attacks with endpoint security manager from boxxe, a leader in the cybersecurity industry.

security

Managed Endpoint Protection

Security Solution Deployment

Protect your organisation from malicious attacks, website spoofing and corrupt files with our deep understanding of cybersecurity in all aspects of solution deployment and the whole development lifecycle

security

Security Solution Deployment

Vulnerability Management, Detection & Response

We identify your exposure to security vulnerabilities, safeguard your IT infrastructure and relieve the workload on your IT teams

security

Vulnerability Management, Detection & Response

Digital Forensics & Incident Response

Recover rapidly from cyberattacks with effective incident response and digital forensics from boxxe, a world leader in cybersecurity.

security

Digital Forensics & Incident Response

Managed Firewall Services

Our cybersecurity experts monitor, manage and maintain your firewalls, freeing up your time to concentrate on helping your business thrive. Get in touch today.

security

Managed Firewall Services

Secure Managed Email Gateway

Protect your business network from advanced threats and known risks, using security controls to manage information flowing in and out of your organisation

security

Secure Managed Email Gateway

General

Types of data we collect

If you fail to provide personal data

How your personal data is collected

How and why we use your personal data

Marketing

Who do we share your personal data with

Who do we share your personal data with - in more detail

Overseas transfers and sharing personal data with sub-processors

Transferring your personal data out of the UK - in more detail

How long your personal data will be kept

Data Security

Cookies and other tracking technologies

Your Rights

Policy Changes

Contact Us

Windows 11 - Not your average upgrade

Windows 11 - Not your average upgrade

Explore our bestselling computers

Explore our bestselling accessories

Latest Case Studies

Helpful Insights

The boxxe Community

Already a customer?

Already a customer?

Vulnerability Management, Detection & Response

Safeguard your IT infrastructure and relieve the workload on your IT teams. We identify your exposure to security vulnerabilities through our VMDR service with regular discovery, assessments, detection and response

Vulnerability Management, Detection & Response

Find your weak spots before anyone else does, with vulnerability management

How boxxe can help with threat and vulnerability management

Cloud technology

Access to experts

Helping your business stay protected

Why choose boxxe for VMDR solutions for your business?

Case Studies

boxxe's VMDR and other cybersecurity services

Our customers love our VMDR and cybersecurity services

Vulnerability management FAQs

Why is it so important to have a vulnerability management system in place?

What are the advantages of outsourcing vulnerability management services?

What role does a security scanner play in VMDR?

How much do your vulnerability management services cost?

Contact us

Protect your business with our vulnerability management, detection and response system today

Other cybersecurity services tailored to your needs

Cybersecurity Risk Assessment

Penetration Testing

Managed Endpoint Protection

Secure Content Delivery Service

Security Solution Deployment

Vulnerability Management, Detection & Response

Digital Forensics & Incident Response

Managed Firewall Services

Secure Managed Email Gateway

Create a business account and start shopping top-brand tech