What is Vulnerability Scanning?
Vulnerability scanning is a process that automatically finds vulnerabilities.
Definition and Word Origin
"Vulnerability" means weakness. Versions and settings are compared with the threat database, and vulnerabilities are reported. It is a digital patrol duty.
How to Know and Use in Daily Life?
Institutional: Periodic scanning.
CI: Dependency checking.
Cloudy: Configuration scan.
Technical Depth and Architecture
Sources:
CVE: Known open catalogue.
SBOM: Content list.
Violence: Critical and high priority.
Example:
trivy fs --severity HIGH,CRITICAL proje/Rule: The scan shows, you get the closure. The open plan found is closed.
Frequently Mixed Things
It is considered a penetration test. Scanning is automatic and superficial, testing is manual and deep. One is a patrolman and the other is a detective.
Use in Different Disciplines
Patrol: Door window control.
Health screening: Pre-symptomatic testing.
Customs: X-ray inspection.
Questions and answers
How often is it done?
Post updates and features are done regularly. It constantly runs in the critical system.
Does it protect?
Alone, no. It shows, you have the closure.
What to do when found?
It is planned, patched and verified according to severity.
What is the Pentest difference?
It can scan the list, test it and try the creative way. Both are used together.
Related terms
This explanation was written in plain language for TreScout with AI and machine-translated from the Turkish original · the Turkish version prevails. If something looks wrong or missing, write to hello@trescout.com. Read in Turkish →