We are using Microsoft Defender Advanced Threat Protection. We purchased it because we have a lot of Microsoft products. It is our virus protection solution. We had people in the security team who were using the advanced features already. So, we decided to use it to measure and mark compliance against vulnerabilities. We're looking for other ways to find file integrity management for the few assets that we need to do it for.

Yes, we used Nexpose and Qualys VM previously. We changed to Tripwire IP360 because we wanted to change and see if we could detect our vulnerabilities from a different perspective.

I have not previously used a different solution.

I did not previously use a different solution, but next year I will be switching to a different cloud-based, security-as-a-service solution.

We did use another solution previously. We switched because we wanted something that was more robust.