Vulnerability Scanning is a scan utilizing automated tools that will compare detected signatures against a database of known vulnerabilities. this can be performed on different sets of targets for example, against network targets or web applications or even APIs. The scan will detect vulnerabilities but will not check if they are exploitable (see penetration test)

Here are 10 characteristics of Vulnerability Scanning:

1. Automated in nature: Vulnerability scanning is typically performed using specialized software tools or scanners. These tools are designed to automatically scan the target environment for known vulnerabilities.
2. Uses a database of vulnerabilities: Vulnerability scanners maintain a database of known security vulnerabilities, which includes information about software flaws, misconfigurations, and other weaknesses that could be exploited. These databases are regularly updated to include new vulnerabilities as they are discovered.
3. Performs network, application and system scanning: Vulnerability scans can target various aspects of an organization’s IT infrastructure, including network devices (routers, switches), servers, workstations, and web applications. Network scans examine open ports, services, and configurations, while web application scans focus on vulnerabilities specific to web applications.
4. Can be performed in a non-Intrusive manner: Vulnerability scans can be non-intrusive in nature, meaning they do not actively exploit vulnerabilities or attempt to compromise systems. Instead, they rely on techniques like port scanning, banner grabbing, and configuration analysis to identify potential issues.
5. Reporting, scoring and prioritization: Once the scan is complete, the vulnerability scanner generates a detailed report that lists the identified vulnerabilities along with their severity levels. The report typically includes information about the vulnerabilities, their impact, and recommendations for remediation. Vulnerabilities are often assigned severity scores, such as the Common Vulnerability Scoring System (CVSS) score, to help organizations prioritize their remediation efforts. Higher-severity vulnerabilities are typically addressed first.
6. Continuous monitoring is key: Vulnerability scanning is not a one-time activity; it should be conducted regularly to keep up with evolving threats and changes in the IT environment. Continuous monitoring helps organizations stay proactive in identifying and addressing security weaknesses.
7. Can help meet compliance requirements: In many industries, regulatory standards and compliance frameworks require organizations to perform regular vulnerability scans as part of their security practices. For example, the Payment Card Industry Data Security Standard (PCI DSS) mandates vulnerability scanning for organizations handling payment card data.
8. Can foster integration with remediation: Vulnerability scan reports are valuable for IT and security teams to prioritize and remediate vulnerabilities. Integration with other security tools and processes can streamline the remediation process.
9. Not without false positives: Vulnerability scans may occasionally produce false positives, which are reported vulnerabilities that are not actual security risks. Human analysis is often required to confirm the validity of identified vulnerabilities.
10. A variety of specialty scanners exist: Depending on the target and system being tested, there are many different scanners that can target a particular system, technology, or framework.