Overview of the program

The Red Hat Vulnerability Management Certification Program provides a formal process for verifying partner security solutions. The process ensures that partner security solutions correctly use Red Hat-provided security data for Red Hat products.

This includes CVE metadata, severity ratings, exploitability information (CSAF-VEX), and remediation advisories (RHSA).

Note

Vulnerability management certification is distinct from Red Hat Container Certification. The Container Certification program focuses on verifying container images for supportability and compliance with Red Hat base image requirements.

Red Hat works directly with partners during the certification process to review scanner behavior, metadata handling, and report formatting. Red Hat lists certified products in the Red Hat Ecosystem Catalog. This helps establish technical alignment and assurance within the Red Hat ecosystem.