Vulnerability scan

A vulnerability scan is an automated check of computers, servers, network devices or websites that looks for known security weaknesses, missing patches and risky configurations.

Scanning tools compare what they find against databases of known vulnerabilities and produce a report ranked by severity. External scans look at your systems from the internet, as an attacker would, while internal scans check devices inside your network. Scans are typically run on a schedule, such as monthly or quarterly, and after major changes.

Vulnerability scanning is an affordable way for Alberta small businesses to find problems before criminals do. It complements patch management by confirming that updates were actually applied, and it can uncover forgotten devices or services that nobody knew were exposed. It is narrower than a penetration test, which involves people actively trying to break in.

Practical tip: scans are only useful if someone acts on the results. Agree on timelines for fixing critical and high findings, track progress over time and rescan to confirm fixes. Ask your IT provider to explain the results in business terms, focusing on the handful of issues that matter most.