What is a vulnerability scan?

A vulnerability scan is an automated check of your systems against a database of known vulnerabilities and weak settings, such as missing patches, default passwords or outdated encryption. A scanner looks at what each machine reveals and produces a list of findings with severity scores. It is cheaper and more frequent than a penetration test, but it only finds known problems and cannot judge how they combine. Run an external scan of everything you expose to the internet regularly, and an internal one at least every few months. Expect many findings; start with those on internet-facing systems that are known to be exploited.

← All 69 questions on What is…? Network and security termsAll topics