In this blog post, we discuss the how "vulnerability management" tends to fall short when approaching modern application security.