Vulnerability Assessment
A vulnerability assessment is a broad, structured review of your systems for known weaknesses. It answers the question “what is exposed and what is out of date?” across many assets at once, and gives you a prioritised list of what to fix.
Vulnerability assessment or penetration test?
A vulnerability assessment is wide: it finds as many known issues as possible across your web apps, servers and network, and verifies them. A penetration test is deep: it exploits issues and chains them to show real business impact. Many organisations start with an assessment and follow with a penetration test of their most critical systems.
What I cover
- Internet-facing assets: domains, subdomains, IPs and exposed services.
- Web applications: common misconfigurations and known vulnerable components.
- Servers and network devices: missing patches, outdated software and weak configuration.
- Cloud assets: public storage and exposed services.
- TLS, email security (SPF, DKIM, DMARC) and security headers.
How I work
- Scoping: agree the assets and the testing window.
- Discovery: build an inventory of everything in scope, including assets you may not know about.
- Scanning: authenticated and unauthenticated scanning with industry tools.
- Manual verification: each finding is checked by hand, so the report contains real issues, not scanner noise.
- Prioritisation and reporting.
What you get
- An asset inventory.
- Verified vulnerabilities ranked by real risk, not just scanner score.
- Clear remediation steps and a recheck after fixes.
Get started
Tell me what you want tested, how large it is and when you need it, and we can agree a scope. Based in India? See how I work with companies across India. Contact me to discuss your systems.