Hack the Route Start free Open app Hardening and auditing
Vulnerability management
The ongoing loop of scanning a host for weaknesses, prioritising them, fixing them, and rescanning to confirm.
Vulnerability management is a loop, not a one-off: scan a host for known weaknesses and misconfigurations, assess each finding by severity, remediate the ones that matter, then rescan to prove the finding is gone. A credentialed scan runs with access to the host (or on it) and reads the real configuration and installed versions, so it finds far more than an outside scan that only sees open ports. The scanner reports findings, each usually tied to a CVE or a baseline rule; the defender's job is to turn that list into prioritised, verified fixes. A finding is not closed because it was patched — it is closed because the rescan no longer reports it.