// what is scanrelay
From vulnerability detection to verified remediation.
Nessus identifies vulnerabilities. ScanRelay helps your team manage what happens next.
Built by SwitchCode for security engineers, vulnerability analysts, and technical teams, ScanRelay transforms Nessus scan data into an organized remediation workspace. Import scan reports, identify recurring vulnerabilities, assign remediation owners, track service-level deadlines, and compare scan results to determine whether vulnerabilities have been resolved.
One workspace. Multiple scans. A clear path to remediation.
// the problem
Finding vulnerabilities is easy. Managing remediation is the hard part.
Nessus can produce thousands of findings. But turning those findings into coordinated action often requires a patchwork of manual processes.
Thousands of findings. No clear ownership.
One vulnerability can affect dozens of hosts. Without proper grouping and assignment, remediation teams receive duplicate requests and lose track of what actually needs fixing.
Spreadsheets become difficult to maintain.
Analysts manually update statuses, copy hostnames, track deadlines, and reconcile multiple scan exports. Information quickly becomes inconsistent.
Remediation requests take too long to prepare.
Creating Jira tickets and emails often requires repeatedly copying plugin descriptions, affected hosts, severity ratings, and remediation instructions.
Closing tickets doesn't prove vulnerabilities are fixed.
A ticket marked resolved doesn't necessarily mean the vulnerability disappeared from the environment. Teams need a way to compare new scan results against previous findings.
Reporting consumes valuable analyst time.
Leadership wants to know what's open, what's overdue, what's improving, and where the greatest risk remains. Producing those answers shouldn't require rebuilding reports every week.
// the solution
Everything between detection and remediation—in one workflow.
ScanRelay brings the essential vulnerability management activities together in a practical, Google Sheets-based workspace.
- 1
Import and consolidate Nessus findings
Upload Nessus CSV exports or connect supported Google Sheets reports. Combine findings from multiple scans into a consistent dataset while preserving report names, affected hosts, plugin IDs, severity, and technical details.
Less manual cleanup. More time analyzing vulnerabilities.
- 2
Prioritize what matters
Filter findings by severity, host, plugin, status, assigned team, and remediation deadlines. Switch between individual findings and unique vulnerabilities to understand both exposure and remediation workload.
- 3
Assign remediation ownership
Use plugin-based assignment rules to identify responsible teams. Apply assignments individually or in bulk, and maintain consistent ownership across recurring findings.
- 4
Build actionable remediation queues
Search by hostname, IP address, plugin ID, vulnerability name, or Jira reference. Select filtered findings in bulk and update assignments, statuses, deadlines, and remediation notes.
- 5
Generate Jira tickets and remediation emails
Create structured remediation messages using customizable templates. Automatically include plugin details, severity, affected hosts, and remediation instructions, then create editable Gmail drafts or copy prepared Jira ticket content for review.
- 6
Compare scans and verify remediation
Import a newer Nessus report and compare it with previous results. Identify findings that remain open, findings no longer detected, and newly discovered vulnerabilities. Optionally restrict comparisons to hosts present in the comparison scan.
Don't just track remediation activity. Verify what the scan evidence supports.
- 7
Build reports that explain progress
View vulnerability trends, severity distributions, aging findings, remediation progress, and team workloads. Use interactive charts to filter the remediation queue and export structured results for security reviews and audits.
// how scanrelay works
From Nessus CSV to actionable remediation in four steps.
Import your scan
Upload one or more Nessus CSV reports into ScanRelay. The tool organizes the findings into a consistent format for analysis.
Prioritize and assign
Review vulnerabilities by severity, affected hosts, and assigned teams. Apply ownership rules, set remediation deadlines, and identify overdue work.
Coordinate remediation
Generate Jira-ready tickets and editable email drafts. Update statuses, document remediation actions, and keep your queue organized.
Validate and report
Import updated scan results to compare findings. Review remediation evidence, investigate unresolved vulnerabilities, and export progress reports.
Import → Prioritize → Remediate → Validate
// features
Built for the work security analysts actually do.
// who it's for
Built for the people responsible for getting vulnerabilities fixed.
Vulnerability Management Analysts
Stop spending hours cleaning CSV files, updating spreadsheets, and preparing repetitive remediation requests. Manage findings from import through validation.
Security Engineers
Prioritize vulnerabilities, track affected systems, and coordinate remediation with infrastructure and application teams.
ISSOs and ISSEs
Maintain organized vulnerability remediation records, document progress, and prepare supporting evidence for security assessments and authorization activities.
System Administrators
Receive clearer remediation requests with relevant hostnames, vulnerability details, and recommended actions.
DevSecOps Teams
Track recurring findings across environments and communicate remediation priorities without adopting a complex enterprise platform.
Small Security Teams and Consultants
Manage vulnerability remediation using familiar Google Sheets workflows, without building a custom tracking system from scratch.
// why scanrelay
Vulnerability management without unnecessary complexity.
Enterprise vulnerability management platforms offer powerful capabilities, but not every team needs another expensive, complicated system. Sometimes you already have the scanner. You already have the findings. What you need is a better way to manage the work.
Use your existing Nessus exports. No need to replace your vulnerability scanner.
Work inside Google Sheets. Familiar interface, practical controls, and accessible reporting.
Keep remediation organized. Assign owners, track statuses, and manage deadlines.
Reduce repetitive tasks. Generate remediation messages and perform bulk updates.
Validate progress. Compare scan results instead of relying solely on ticket status.
Maintain control of your data. Use a central tracker rather than scattering updates across unrelated spreadsheets.
// faq
Frequently Asked Questions
Does ScanRelay replace Nessus?
No. Nessus performs vulnerability scanning. ScanRelay helps organize, prioritize, assign, track, and review the resulting findings.
Do I need an enterprise vulnerability management platform?
No. ScanRelay is designed to provide a practical remediation management workflow using Nessus exports and Google Sheets.
Can I import multiple Nessus reports?
Yes. ScanRelay supports combining findings from multiple configured reports while retaining source information.
Can I assign findings to different teams?
Yes. You can assign findings manually or use plugin-based assignment rules to support bulk assignment.
Does ScanRelay integrate with Jira?
ScanRelay supports generating Jira-ready remediation content from customizable templates. Direct ticket creation depends on the integrations available in your deployment.
Can ScanRelay verify whether vulnerabilities were fixed?
ScanRelay compares findings across scan reports to identify vulnerabilities no longer detected in the comparison results. Disappearance from a scan is not, by itself, proof of remediation; scan scope, coverage, and authentication must also be considered.
Is ScanRelay a compliance certification platform?
No. ScanRelay supports vulnerability remediation tracking and evidence preparation. It does not independently certify compliance, authorize systems, or replace professional security assessment.