An external vulnerability scan identifies security weaknesses in your internet-facing systems, such as web applications, servers, and network devices. It helps detect potential entry points for cyberattacks before they can be exploited by malicious actors.

We offer two types of external vulnerability scans:

1. Verified Vulnerability Scan – Premium
   In this option, we conduct a comprehensive vulnerability scan and manually review the results to filter out false positives. While this improves accuracy, it is important to note that this is not a full penetration test and does not include active exploitation or in-depth security analysis.

2. Automated Vulnerability Scan – Basic
   This option provides a raw vulnerability scan report without the manual review. While it is a more cost-effective solution, we strongly advise against it, as it places a significant burden on your team to analyze false positives and determine the actual risks.

For reliable security insights with minimal effort on your side, we recommend the Verified Vulnerability Scan to ensure a more accurate and actionable assessment of your external security posture.

Prerequisites:
To perform the scan, the only prerequisite on your side is to whitelist our scanner’s IP address to ensure uninterrupted access to your external systems.

Outcome:
The outcome of the vulnerability assessment is documented in the form of a report which contains a summary of the high-risk vulnerabilities, visually depicting the overall threat level and a full list of all findings, including technical details and recommendations. This report can be used by management to get an overview of the security posture of the IT environment and represents the basis for technicians to address the identified risks.

An internal vulnerability assessment identifies security weaknesses within your internal network, helping to detect misconfigurations, outdated software, and other vulnerabilities that could be exploited by attackers who gain access to your environment. This proactive approach enhances your overall security posture and minimizes internal risks.

We conduct a comprehensive vulnerability scan and manually review the results to eliminate false positives, ensuring that you receive accurate and actionable insights. Additionally, we offer authenticated scans, which provide deeper visibility into system patch levels and security configurations by using valid credentials to assess internal assets more thoroughly.

Prerequisites:
To perform the assessment, we require either a VPN connection to your internal network or access to a virtual machineor cloud instance that we provide for scanning.

Outcome:
The outcome of the vulnerability assessment is documented in the form of a report which contains a summary of the high-risk vulnerabilities, visually depicting the overall threat level and a full list of all findings, including technical details and recommendations. This report can be used by management to get an overview of the security posture of the IT environment and represents the basis for technicians to address the identified risks.

The PCI DSS Internal Vulnerability Scan is a mandatory security requirement for organizations handling payment card data. Under the latest PCI DSS standards, these scans must be authenticated and performed quarterly to ensure internal systems remain secure and compliant.

We offer a yearly package, conducting scans every quarter and providing detailed reports to support your compliance efforts. Our authenticated scans offer deeper visibility into system vulnerabilities, ensuring accurate assessments of patch levels and security configurations.

Prerequisites:
To perform the scans, we require either a VPN connection to your internal network or access to a virtual machine or cloud instance that we provide for scanning. In addition to perform authenticated scans, we require credentials to access your systems.

Outcome:
The outcome of the vulnerability assessment is documented in the form of a report which contains a summary of the high-risk vulnerabilities, visually depicting the overall threat level and a full list of all findings, including technical details and recommendations. This report can be used by management to get an overview of the security posture of the IT environment and represents the basis for technicians to address the identified risks.