Discover Vulnerabilities with Vulnerability Scanning

A scan checks automatically against known vulnerabilities and produces an inventory. A penetration test attempts to actually exploit and chain what it finds — no tool does that on its own. The scan shows you where the weaknesses are; the test shows what an attacker could do with them.

Normally not. We agree the window and intensity in advance and exclude sensitive systems or treat them separately. Where a risk exists, we say so beforehand — not afterwards.

You receive a report with the findings, their rating and a prioritised recommendation. The data stays with you and us; it goes to nobody else. On request we walk through the report together so the order of remediation is clear.

Once is a start, not a state. Every change to your systems and every newly published vulnerability shifts the picture. Keeping an overview needs a recurring check — which is exactly what the subscription models are for.

No, and nothing does. A scan finds what is known and what is visible from outside or from the network. Misconfigured processes, abusable permissions and the chaining of several small weaknesses stay hidden from it. Which is precisely why this page has its own section on the limits.