Security · Assess
Vulnerability Assessment
A vulnerability assessment tells you what an attacker could exploit today. Run once it's a snapshot; run continuously it becomes a managed control that keeps your exposure falling month on month.
What you get
- Authenticated scans of internal, external and cloud assets
- Risk-based prioritisation: exploitability and exposure, not just CVSS
- Monthly trend reporting that shows exposure going down
- Evidence of a working vulnerability-management control for auditors
Who it's for
Any organisation that must demonstrate ongoing vulnerability management: POPIA's 'appropriate, reasonable technical measures', cyber-insurance conditions, ISO 27001 A.8.8, or customer security questionnaires.
What's included
External attack surface
Everything reachable from the internet: public IPs, DNS, mail, VPN portals, web apps and leaked credentials.
Internal & endpoint scanning
Servers, workstations, network devices and printers, scanned with credentials for accurate results.
Cloud & M365 misconfiguration
Azure and Microsoft 365 settings checked against CIS benchmarks alongside the infrastructure scans.
Remediation workflow
Findings become tickets with owners and due dates. We re-test and close them, or fix them for you under a managed agreement.
Ready to scope your vulnerability assessment?
One call to agree scope and timing. Fixed price before any work starts.