Vulnerability Scanning

About Vulnerability Scanning

Vulnerability scanning tools check network hosts, cloud assets, and container images for unpatched software and configuration mistakes. The category covers network scanners like OpenVAS and Nuclei that probe hosts for known vulnerabilities by checking service versions, testing for default credentials, and sending detection payloads. Container and image scanners like Trivy inspect Docker images for vulnerable packages and misconfigurations before deployment. Exposure management platforms aggregate vulnerability findings with asset context, so teams can prioritize remediation based on which vulnerable systems are internet-facing or hold sensitive data. Authenticated scanners log into target systems to check installed software versions against vulnerability databases, producing more accurate results than unauthenticated network scans. The category has evolved toward continuous scanning and exposure management (CTEM), where scanners run continuously rather than in periodic batches, and findings are correlated with threat intelligence to prioritize patches for vulnerabilities being actively exploited. Free tools like OpenVAS and Nuclei provide broad coverage for teams without commercial budgets, while commercial platforms add asset correlation, risk scoring, and ticketing integration.