Vulnerability Assessment

Deploy semi-automated vulnerability scanning of your digital assets to identify security weaknesses and associated risks to your business. Find out how a vulnerability assessment can help reduce your attack surface.

Get Started

Your vulnerability management program.

Vulnerability Detection

By scanning for security holes and weaknesses, you can ensure that a security breach is not in progress while identifying any potential opportunities for attackers.

Maintain Integrity

Regular vulnerability scanning against your infrastructure will give your business the assurance that any preventative measures in place are operational and continuous. Ensure that your business assets haven’t gone unpatched.

Inventory of Assets

Vulnerability scanning allows your organisation to gain a solid understanding of your inventory of assets. Our discovery scanning can help you identify what’s in your network, ensuring that you’re protected from the unknown.

Our Methodology

Vulnerability Assessment Methodology Icons Image

Pre-Engagement

An initial discussion on the assessment scope, understanding any compliance requirements, the overall threats associated with your business and how often scanning should be conducted.

Reconnaissance

Reconnaissance and host identification allow us to determine what business assets are in scope for vulnerability scanning. This discovery phase establishes a picture of your network.

Semi-Automated Scanning

Our vulnerability scanning toolset is configured and launched. The previously identified assets are programmatically scanned for security vulnerabilities and known weaknesses.

Comprehensive Reporting

The scanning output results are verified for false positives and accuracy. Duplicate findings are removed and a custom, detailed report on the identified issues is written.

Rescanning and Support

A post engagement remediation meeting is held. Clearfin will be available for remediation guidance and will conduct additional scanning to ensure determined vulnerabilities have been appropriately patched.

Our Methodology

Pre-Engagement

An initial discussion on the assessment scope, understanding any compliance requirements, the overall threats associated with your business and how often scanning should be conducted.

Reconnaissance

Reconnaissance and host identification allow us to determine what business assets are in scope for vulnerability scanning. This discovery phase establishes a picture of your network.

Semi-Automated Scanning

Our vulnerability scanning toolset is configured and launched. The previously identified assets are programmatically scanned for security vulnerabilities and known weaknesses.

Comprehensive Reporting

The scanning output results are verified for false positives and accuracy. Duplicate findings are removed and a custom, detailed report on the identified issues is written.

Rescanning and Support

Our Methodology

Pre-Engagement

An initial discussion on the assessment scope, understanding any compliance requirements, the overall threats associated with your business and how often scanning should be conducted.

Reconnaissance

Reconnaissance and host identification allow us to determine what business assets are in scope for vulnerability scanning. This discovery phase establishes a picture of your network.

Semi-Automated Scanning

Our vulnerability scanning toolset is configured and launched. The previously identified assets are programmatically scanned for security vulnerabilities and known weaknesses.

Comprehensive Reporting

The scanning output results are verified for false positives and accuracy. Duplicate findings are removed and a custom, detailed report on the identified issues is written.

Rescanning and Support

Common targets:

Web Application

Web application scanning involves crawling the website in scope while documenting the technologies in use. Simulated attacks are performed against the application and the results are analysed. Web app scanning includes, but is not limited to:

In-depth Discovery
Vulnerable Libraries and Components
Injection Flaws
Vulnerable Software
Authentication and Session Issues
Information Leakage

Network Infrastructure

Network scanning discovers and fingerprints the devices on the network in scope and performs various checks on the host's response to determine if vulnerabilities or security weaknesses are present. Network scanning includes, but is not limited to:

Asset Identification
Host Discovery and Port Scanning
Outdated and EOL Software
Protocol Level Vulnerabilities
Encryption Weaknesses
Vulnerable Software

Scanning perspective:

Internal Network

This form of scanning identifies vulnerabilities that may exist beyond your primary security perimeter. Internal scanning identifies security weaknesses from inside your business’ network.

External Network

This scanning type assesses your external security perimeter from the perspective of an outside attacker. Vulnerabilities identified here will be public-facing and available to everyday internet threats.

Request a sample report.

We take pride in our ongoing security research and vulnerability documentation. Our unique reporting and management process ensures that remediation is as frictionless as possible. Leave us your email below to request a sample report.

We use fully accredited testers.

Frequently Asked Questions

What is the difference between vulnerability scanning and penetration testing?

Will this cause any disruption to my service?

What scanning software is used?

How long does a vulnerability scan take?

Speak to an expert today.

Get in Touch