Back to Glossary
Pentest & Red Team

Vulnerability Assessment

Systematic process of identifying and classifying vulnerabilities in systems

Vulnerability Assessment is a process of identifying, quantifying, and prioritizing vulnerabilities in IT systems. Unlike pentesting, vulnerability assessment focuses on discovery rather than exploitation of vulnerabilities.

Assessment Phases

  1. Asset Inventory — determining all systems in scope
  2. Scanning — automated vulnerability search
  3. Analysis — verification and prioritization of findings
  4. Reporting — documenting results
  5. Remediation — fixing vulnerabilities

Scanning Types

  • Network — network infrastructure scanning
  • Host-based — operating system scanning
  • Web Application — web service scanning
  • Database — DBMS scanning

Related Terms

Category

Penetration testing, attack methodologies, Red Team operations