Vulnerability Scanning

What Is Vulnerability Scanning?

Vulnerability scanning is a process of identifying, classifying, and assessing the security vulnerabilities of a computer system, network, or application. It is a critical component of a comprehensive security program, as it helps to identify potential vulnerabilities before they can be exploited.

Description

Vulnerability scanning uses automated tools to probe systems and applications for known weaknesses, misconfigurations, and outdated software. Results are typically categorized by severity to help security teams prioritize remediation. Unlike penetration testing, vulnerability scanning is primarily automated and does not involve manual exploitation of discovered issues.

Usage and Examples

Vulnerability scanning is used by organizations to identify and remediate security weaknesses on a regular basis. Common tools include Nessus, Qualys, and Rapid7. Organizations typically run scans on a scheduled basis and after major infrastructure changes.

Evolve Security's penetration testing services go beyond automated scanning to include manual exploitation and validation of discovered vulnerabilities.