Programs & Compliance
Vulnerability Assessment
Broad, scanner-driven discovery validated by a human to cut the false positives.
Scoped to your environmentFixed proposalFree retest within 6 monthsNamed operator
What is Vulnerability Assessment? A vulnerability assessment uses automated scanning to find known weaknesses across your systems, then validates and prioritizes the results. It is broader but shallower than a penetration test.
What we test
- Authenticated & unauthenticated scanning
- False-positive validation
- Risk-based prioritization
- Patch & configuration guidance
- Trend tracking over time
- Pairs with PTaaS
What you get
- Named operator from kickoff to readout
- Kill Chain Replay™ attack paths with evidence
- Risk-rated findings and remediation guidance
- Framework mapping for your auditor
- Live readout call
- Free retest of all findings within 6 months
Vulnerability Assessment FAQ
Vulnerability scan vs. penetration test — which do auditors accept?
Auditors generally distinguish the two; frameworks like SOC 2 and PCI DSS expect a true penetration test in addition to scanning.
What do we receive at the end?
An executive summary, Kill Chain Replay™ attack paths, risk-rated findings mapped to the relevant frameworks, remediation guidance, a readout call and a free retest of every reported finding within 6 months.
Related testing
Programs & Compliance
Pentesting as a Service (PTaaS)
Ongoing, on-demand testing that keeps pace with your releases.
Learn more Programs & ComplianceThreat Modeling
Map how an attacker would target your system before you build or ship it.
Learn more Programs & ComplianceCompliance Penetration Testing
SOC 2, PCI DSS, HIPAA, ISO 27001, NIST AI RMF and CMMC-aligned testing and reporting.
Learn more