Definition

Vulnerability assessment

A vulnerability assessment scans your systems to find and catalog known weaknesses, such as unpatched software, weak configurations, or exposed services. It aims for breadth, sweeping across many hosts to build a prioritized inventory of what needs attention. This differs from a penetration test, which goes deep and actually tries to exploit weaknesses to prove impact. Because scans run quickly and can repeat on a schedule, many teams use vulnerability assessments as an ongoing health check between deeper tests. The catch is noise: a scanner can flag issues that do not apply, so a skilled analyst validates the findings before your team spends effort fixing them.