Remote vulnerability scanning services

A vulnerability scanner is defined as a computer program that has been designed to search for and map systems for weaknesses in an application, computer, or network. The most popular example of a vulnerability scanner is Nessus.

A third-party vulnerability scanning service monitors Internet-facing servers by scanning them with a vulnerability scanner. It then provides a report to the server owner that will clearly show any misconfiguration or vulnerable services that may be exploited by malicious attackers to compromise the server or network.

Some service providers also offer a certification or seal to display on a web site to show that your system is checked for security vulnerabilities regularly. There has been some debate amongst the community of the value of these. However, many people believe they at least provide a sales benefit as it makes the customer feel that the organization is security-conscious.

Advantages of a vulnerability scanning service

• You can discover obvious vulnerabilities on your server, allowing you to remediate and fix the security hole.
• There is no need for specialist security knowledge to install and configure the vulnerability scanning programs.
• It is an external look at your systems, similar to what an attacker would see.
• All management of the vulnerability scanning software, including updates and configuration, is done by a third party.
• If you have a managed server or use a server management company, it is an independent audit of the level of security they are providing.

Disadvantages of a vulnerability scanning service

• It is an expense, which varies amongst the different providers from budget to expensive corporate rates.
• You cannot customize the scanner to your requirements. Scans are usually default or generic.

See also

• Remote vulnerability scanning service providers

Share / Bookmark this page: