Abstract: Techniques are described that generally relate to centralized vulnerability discovery and management of disparate network-connected devices. A computing device connected to a network determines vulnerabilities for devices connected to the network. The computing device identifies the devices connected to the network and determines vulnerability information for the network-connected devices using one or more remote sources of vulnerability information. For example, the computing device may access websites containing vulnerability or security information, e.g., by performing web searches on a periodic basis, subscribing to one or more web-based feeds of vulnerability information, or the like. The computing device performs a variety of operations (e.g., ranking vulnerabilities, applying patches, sending notifications, or the like) for the network-connected devices based on the vulnerability information.