What is the difference between remediation rule and job?

Overview

Both Remediation Rules and Remediation Jobs are patching mechanisms used to address vulnerabilities in applications. However, they differ in their application, execution, and persistence.

What is a Remediation Rule? 

A Remediation Rule is a predefined patching policy that is applied automatically after every vulnerability scan. Users can configure rules to include or exclude specific assets from the patching process. Since remediation rules are persistent, they ensure continuous patching compliance over time.

Key Characteristics of Remediation Rules:

✔ Applied after every scan automatically
✔ Allows users to include/exclude assets
✔ Ensures ongoing vulnerability remediation

What is a Remediation Job? 

A Remediation Job is a one-time patching activity that allows users to apply patches immediately, after a scheduled scan, or at a specific time. Unlike remediation rules, remediation jobs do not persist and expire once completed.

Key Characteristics of Remediation Jobs:

✔ Can be executed immediately or scheduled
✔ Applies patches to vulnerable applications once
✔ Expires after completion

When to Use?

• Use Remediation Rules when you need ongoing automated patching.
• Use Remediation Jobs for one-time patching of vulnerabilities on demand.