Vulnerability monitoring is now part of osctrl: opt-in software inventory from every enrolled node, matched continuously against OSV advisories, the CISA KEV catalog and, optionally, NVD CVEs, all inside your own deployment. The findings drive alerts, posture scores and patching priorities, making vulnerability management a continuous practice, which is a cornerstone for compliance.