Vulnerability detection and management plays a key role in secure software development. There are many different vulnerability detection tools and techniques to choose from, and insufficient information on which techniques to use and when. The goal of this research is to assist software teams in developing tactics and strategies for reducing security risk through empirical analysis of vulnerability detection, fixes, and exploitability. We will examine the relationships between the vulnerability detection technique used to find a vulnerability, the type of vulnerability found, the exploitability of the vulnerability, and the effort needed to fix a vulnerability on two projects where we ensure all vulnerabilities found have been fixed. We will then examine how these relationships are seen in Open Source Software more broadly where practitioners may use different vulnerability detection techniques, or may not fix all vulnerabilities found due to resource constraints.