# What is Vulnerability Scanning?

> Vulnerability scanning is the automated probing or analysis of systems, applications, configurations, software inventories, or artifacts to identify conditions associated with known weaknesses or unsafe settings.

- Canonical URL: https://yellowcube.eu/glossary/vulnerability-scanning/
- Publisher: Yellow Cube
- Language: en
- Contact: hello@yellowcube.eu

## Content

A scanner compares observed evidence with signatures, rules, version data, or policy checks and reports candidate findings. Scanning is one assessment method; it does not by itself confirm exploitability, business impact, remediation priority, or compliance.

Scans may be network-based, host-based, application-focused, cloud-focused, or applied to code, dependencies, containers, and configuration. Authenticated scanning usually provides deeper evidence than an external view, but both modes depend on coverage, credentials, safe configuration, and current detection content.

### Key points

- **Planned operation:** Define authorization, targets, exclusions, credentials, rate limits, maintenance windows, and stop conditions, especially for fragile production, operational technology, or safety-relevant systems.
- **Result triage:** Check affected versions and configurations, backported fixes, reachability, compensating controls, duplicates, and contradictory evidence before assigning ownership or urgency.
- **Program use:** Repeat scans after material change and relevant intelligence updates, integrate findings with other evidence, and rescan or otherwise validate treatment rather than treating initial detection as closure.
- **Important limitation:** Scanners can produce false positives and false negatives, miss novel or context-dependent weaknesses, and disrupt sensitive targets; a clean report is not proof of security, and a finding is not proof of a workable attack.

### Related terms

[Vulnerability assessment](<https://yellowcube.eu/glossary/vulnerability-assessment/>) · [Vulnerability management](<https://yellowcube.eu/glossary/vulnerability-management/>) · [Penetration testing](<https://yellowcube.eu/glossary/penetration-testing/>) · [Port scanning](<https://yellowcube.eu/glossary/port-scanning/>) · [Security misconfiguration](<https://yellowcube.eu/glossary/security-misconfiguration/>)

### Sources

[NIST SP 800-115](https://csrc.nist.gov/pubs/sp/800/115/final) · [NIST SP 800-53 Rev. 5](https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final)

## Attribution and scope

This Markdown representation is generated from the same approved content records as the canonical HTML page. Cite the canonical URL above when referencing this material. Product and service descriptions are informational; confirm project-specific requirements with Yellow Cube.