1. Find systems
VulnStatus starts with a permitted domain. It finds related domains, hosts, services, and DNS records.
Scan procedure
VulnStatus scans external systems at set times. It operates without an agent on your systems.
Five steps for each scan
2. Find public services
VulnStatus finds open ports, service versions, login pages, and TLS certificates.
3. Find security problems
VulnStatus compares service data with known vulnerabilities and incorrect configurations. Results include severity scores and evidence.
4. Calculate the grade
VulnStatus gives the systems a security grade from A to F. Critical results have a strong effect on this grade.
5. Send alerts
VulnStatus compares each scan with the previous scan. It sends alerts for new problems and changes.
Security grades
A
No critical or high results. The scan includes all systems in the permitted scope.
B
No critical results. High results are before their correction deadlines.
C
The number of high results increases, or results stay open after their correction deadlines.
D
There is a critical result or a high result after its correction deadline.
F
There are multiple critical results or a critical result after its correction deadline.
Scan limits
Before the scan
Show that your company is the domain owner. Set the permitted scope of the scan.
During the scan
VulnStatus does not log in to systems. It does not use vulnerabilities to get access.
After the scan
Read the evidence for each result. Select correction tasks and monitor changes.
Get information for your systems.
Send your domain to get a demonstration and a price.