Custom User-defined vulnerability rules. Users can set the vulnerabilities auditing policies by themselves.