Vulnerability Scanning
Vulnerability scanning automatically checks systems, networks, and applications against a database of known vulnerabilities, flagging outdated software, missing patches, and common misconfigurations — broad, fast, and largely automated, in contrast to the manual, targeted depth of a penetration test.
Scanners work by fingerprinting the software and versions in use (a web server, an OS, a database engine) and cross-referencing them against public vulnerability databases (CVE listings), flagging anything with a known, disclosed issue — fast and broad coverage, but limited to vulnerabilities that are already publicly known and cataloged.
Scanning is typically run continuously or on a regular schedule as a baseline hygiene check, while penetration testing is reserved for periodic, deeper manual engagements — the two are complementary layers of a security program, not substitutes for each other.
