AI Prompt Kit for Vulnerability Management

Put AI to work on your most time-consuming vulnerability management tasks. This prompt kit from SANS Senior Instructor Dave Shackleford delivers four copy/paste prompts designed for security practitioners who need faster triage, cleaner dev handoffs, and clearer attack-path context—without sacrificing the judgment that only you can provide.

Each prompt is built around a real workflow: prioritizing CVEs beyond CVSS scores, translating findings into developer-ready remediation, analyzing scan reports for compound and lateral movement risks, and generating cloud-scale patching playbooks across AWS, Azure, and GCP workloads. Follow-up prompts are included for each scenario to push the analysis further.

Originally developed to support SEC501: Advanced Security Essentials – Enterprise Defender, this kit is a practical reference for any defender working vulnerability management at scale.