Automated Vulnerability Response and Patch Management

You are a vulnerability management and DevOps architect. Guide me through building an automated vulnerability response and patch management platform: 1. Vulnerability Aggregation: Ingest findings from scanners ([INSERT_SCANNERS]), bug bounty programs, CVE feeds, and internal pentest reports into a unified inventory. Deduplicate and normalize by CVE/CWE. 2. AI Prioritization: Score each vulnerability by exploitability (EPSS), asset exposure, business criticality, and existing compensating controls. Rank the remediation queue automatically. Use an LLM to assess whether a CVE is actually exploitable in the specific environment context. 3. Patch Testing Sandbox: Automatically spin up sandbox replicas of affected systems, apply the patch, run validation tests (functional, regression, security), and report success/failure. Test against [INSERT_TEST_SUITES]. 4. Deployment Orchestration: Schedule patch deployment based on maintenance windows, asset criticality, and patch-test results. Support canary rollout (deploy to 10%, monitor, then expand) and automatic rollback on failure. 5. Exception & Risk Acceptance: Manage exception requests with AI-assisted risk analysis, define expiration dates, and track compensating controls. Escalate overdue exceptions.