Vulnerability Scanning

About Vulnerability Scanning

Vulnerability scanning tools check network hosts, cloud assets, and container images for unpatched software and configuration mistakes. The category covers network scanners like OpenVAS and Nuclei that probe hosts for known vulnerabilities by checking service versions, testing for default credentials, and sending detection payloads. Container and image scanners like Trivy inspect Docker images for vulnerable packages and misconfigurations before deployment. Exposure management platforms aggregate vulnerability findings with asset context, so teams can prioritize remediation based on which vulnerable systems are internet-facing or hold sensitive data. Authenticated scanners log into target systems to check installed software and patch levels against vulnerability databases. Continuous threat exposure management (CTEM), a process introduced by Gartner, replaces periodic assessments with ongoing exposure assessment and prioritization, and exposure platforms correlate findings with asset context and threat intelligence to decide what to fix first. Free tools like OpenVAS and Nuclei provide broad coverage for teams without commercial budgets, while commercial platforms add asset correlation, risk scoring, and ticketing integration.