PMAP

Spec sheet

What it does

PMAP describes itself as an enterprise vulnerability management platform and multi-vendor scan orchestrator that tracks findings through remediation to verified closure.Read 7 Oct 2026 · pmap.io

Purpose

PMAP is an enterprise vulnerability management platform that ingests scanner results, correlates findings, and tracks remediation.Read 7 Oct 2026 · pmap.io

Intended users

PMAP says it is built for enterprise security teams and describes partner tracks for managed providers, resellers, system integrators, and consulting or pentest firms.Read 7 Oct 2026 · pmap.io

Audience

PMAP describes itself as built for enterprise security teams and organizations managing a holding company and subsidiaries.Read 7 Oct 2026 · pmap.io

Integrations

PMAP creates and syncs tickets with Jira, ServiceNow, and ManageEngine, and can gate CI/CD pull requests on new critical or high findings.Read 7 Oct 2026 · pmap.io

Security

PMAP says connector credentials are encrypted at rest and credential values are omitted from connector list responses.Read 7 Oct 2026 · pmap.io

Headquarters

Istanbul, TurkeyRead 28 Sep 2026 · pmap.io

Founded

2018Read 28 Sep 2026 · pmap.io

Availability and sales

The site invites prospective customers to request a demo; the pricing URL did not provide an accessible pricing page.Read 7 Oct 2026 · pmap.io

Compliance posture

PMAP lists SOC 2 Type II as in progress, ISO 27001 controls as aligned, and GDPR readiness with regional data residency.Read 7 Oct 2026 · pmap.io

Correlation

PMAP matches findings by scanner reference and SHA-1 fingerprint, deduplicates across scanners, and can reopen closed findings while preserving status history.Read 7 Oct 2026 · pmap.io

Deduplication

PMAP matches scanner results against existing findings and says fingerprint matching can merge the same issue found by different scanners on the same asset.Read 7 Oct 2026 · pmap.io

Disclosure policy

Privia Security Ltd publishes a responsible disclosure policy that invites vulnerability reports and describes its handling commitments.Read 7 Oct 2026 · pmap.io

Multi-tenancy

PMAP says it supports a holding company and subsidiaries with scoped data, role-based access, SLA thresholds, and four-eye approvals.Read 7 Oct 2026 · pmap.io

Multi-tenancy and access

PMAP supports holding-company and subsidiary hierarchies, scoped tenant boundaries, custom roles, and a 10-entity by 6-action permission matrix.Read 7 Oct 2026 · pmap.io

Pricing availability

The pages reviewed direct prospective customers to request a demo and do not state a PMAP subscription price.Read 7 Oct 2026 · pmap.io

Remediation workflow

PMAP applies ownership and SLA deadlines to findings and provides an enforced lifecycle with audit-logged status transitions.Read 7 Oct 2026 · pmap.io

Report integrity

PMAP reports can be signed with a SHA-256 integrity hash and verified through a public QR endpoint.Read 7 Oct 2026 · pmap.io

Reporting

PMAP generates scheduled PDF, DOCX, and HTML reports and says signed reports include a SHA-256 hash and QR verification link.Read 7 Oct 2026 · pmap.io

Reports and analytics

PMAP provides configurable dashboards, risk scoring, and six report types generated as PDF, DOCX, or HTML.Read 7 Oct 2026 · pmap.io

Sales and evaluation

The site directs prospective customers to request a demo and says a scoped technical evaluation against their own scanners can be discussed.Read 7 Oct 2026 · pmap.io

Scan management

Users can launch, schedule, import, pause, resume, and stop scans from PMAP, with live status sync for running scans.Read 7 Oct 2026 · pmap.io

Scan orchestration

PMAP says it supports launching, scheduling, importing, pausing, resuming, and stopping scans across 30 vendor connectors.Read 7 Oct 2026 · pmap.io

Scanner coverage

PMAP says it has 30 vendor connectors across 9 integration categories, covering vulnerability scanners, DAST, SAST, SCA, ITSM, and CI/CD.Read 7 Oct 2026 · pmap.io

Security controls

The company page lists full audit trails, role-based access control with four-eyes approval, and vendor credentials encrypted at rest.Read 7 Oct 2026 · pmap.io

Triage and remediation

Findings follow an enforced lifecycle with owners, severity-based SLAs, escalation, and optional four-eyes approval for closure.Read 7 Oct 2026 · pmap.io

Where Specifiction places it

• DevSecOps Platforms#17 of 257.1