UPGRADE TO NUCLEUS

Kenna is Ending. Your Risk-Based Program Doesn’t Have To.

Cisco Vulnerability Management is reaching end-of-life. Upgrade to Nucleus.

Cisco announced on December 10, 2025, that its Vulnerability Management platform, previously known as Kenna Security, will reach end of sale on March 10, 2026, with final support ending June 30, 2028

This isn’t just a product sunset. It’s the end of the first era of risk-based vulnerability management and the start of exposure management.

Nucleus is the next-generation Kenna replacement that levels up your risk-based VM program to true orchestrated exposure management.

Our proven migration playbook and in-the-trenches team make the upgrade fast, guided, and low risk – a no-brainer for any team looking to upgrade from Kenna to a next-gen EM platform.

Kenna Buyout Limited Time Offer

For a limited time, migrate from Kenna with a buyout of your remaining Kenna term.

To find out if you are eligible, complete the form to connect with a Nucleus representative.

Enterprise-Grade Security

FedRamp SOC

Upgrade to Nucleus

Frequently Asked Questions

Can Nucleus match my Kenna dashboards and workflows? 

Yes. We map your existing Kenna program into Nucleus so your teams can hit the ground running. 

Can I keep my existing scanners and tools? 

Yes. Nucleus is vendor-agnostic and works with your current scanners and asset sources.   

How long does it actually take to upgrade from Kenna to Nucleus? 

Smaller customers can move from Kenna / Cisco VM to Nucleus in under 30 days. We use a proven migration playbook: we map your current connectors and workflows, run Nucleus in parallel with Kenna so you can validate results, then cut over once you’re confident—no “big bang” surprises. 

What makes Nucleus different from just using our scanner vendor’s exposure platform? 

Scanner vendors are built to sell and prioritize their data. Nucleus is vendor-agnostic and acts as your neutral exposure system of record across all scanners and AppSec tools. You keep leverage over vendors, avoid lock-in, and don’t have to redesign your program every time you change a scanner. 

How is Nucleus different from newer or emerging exposure platforms? 

Many emerging solutions look great in demos but haven’t been proven at enterprise scale or complexity. Nucleus already runs in large, complex environments with multi-BU orgs, thousands of users, and messy mixes of legacy + cloud. You get modern exposure management plus the maturity and reliability you need for a Kenna replacement. 

Can we keep our current scanners, ticketing, and AppSec tools? 

Yes. Nucleus plugs into your existing stack; network scanners, cloud security tools, AppSec platforms, ITSM, and collaboration tools. The goal is not to replace them, but to unify findings, add context, automate workflows, and give you one place to run your exposure program.

Can Nucleus replicate our Kenna reports, dashboards, and SLAs? 

We don’t “clone” Kenna, we recreate the intent of your key dashboards, metrics, and SLAs, and usually improve them. As part of the migration assessment, we map your Kenna reports to equivalent (or better) Nucleus views so your stakeholders don’t lose the visibility they rely on.

How does Nucleus handle complex org structures and MSSPs? 

Nucleus was designed for true multi-tenancy and org mapping. You can mirror real-world structures—business units, regions, subsidiaries, or customer tenants—set SLAs per group, and report on performance by owner. MSSPs get clean separation between customers while still managing everything from one place.

How does Nucleus move us from “prioritization” to full workflow orchestration with reliable ownership?

Kenna helped you prioritize. Nucleus goes further by becoming the orchestration layer for risk management remediation. We operationalize your metadata to reliable assign ownership.

What exactly do we get in the Kenna to Nucleus migration? 

The migration gives you a concrete, low-risk path off Kenna: an assessment of your current setup, a draft Nucleus architecture (integrations, org model, workflows), and clear options including contract buyout eligibility.