Vulnerability Management as-a-Service