Simple definition
A vulnerability scanner applies technical checks to assets to identify known flaws or potentially risky configurations.
Purpose and use
It helps find and track issues at scale, but results require validation before action.
How does it work?
Depending on the tool and granted access, it examines versions, services or settings against a check database. Authenticated assessment can provide more context.
Key points
- Example: a scanner flags an affected version; the team confirms the edition, installed fixes and actual service exposure.
- Check scope, check-database freshness and authentication success to understand coverage.
Points to watch
False positives and negatives remain possible. Scanning can affect fragile equipment, so timing and settings must suit the environment.
In short
A scanner produces observations; vulnerability management turns them into verified action.