Vulnerability management benchmarks


Despite the continuous effort in our company to resolve vulnerabilities, we are still report a significant number of vulnerabilities after each scan we perform.

We would like to understand if there are industry benchmarks or ratios, like number of vulnerabilities per asset out there that we can use to compare ourselves with.

Is any of you aware of any industry benchmark in this regard?

Thanks