A vulnerability assessment checks an organization’s network and systems for any known vulnerabilities against a database of vulnerability information. At the completion of the scan, the organization obtains a report that outlines their risk exposure.

Though vulnerability scans have two methods, the type of scans that exist typically fall into one of three categories: Full scan – As the name implies, a full scan is a thorough vulnerability scan that leverages its database of known vulnerabilities to look for any existing vulnerabilities across an organization’s network and systems. This can also be referred to as a “deep scan.” Quick scan – Also known as a “discovery scan” or a “stealth scan,” this type of vulnerability scan is meant to elevate awareness of the type of vulnerabilities that could be possible based on the network devices and system applications that exist. Compliance scan – This type of vulnerability scan is leveraged primarily as a means to audit an organization’s security as it relates to compliance regulations.

A penetration test may not list or confirm every vulnerability in the environment, but a vulnerability scan will scan all systems looking for signatures that match known vulnerabilities that may (or may not) be able to be penetrated. This approach enables an organization to enhance its security posture with a more complete picture of the threat surface.