Managed Security Services
Vulnerability Scan Service
Also known as vulnerability assessment or vulnerability management, this service identifies known security issues that could be exploited to impact the confidentiality, integrity and/or availability of your corporate data or services.
Why it matters
Visibility
Identify known weaknesses in systems, applications and configuration.
Early detection
Regular assessments help uncover issues so you can plan remediation.
Prioritisation
Use findings to prioritise fixes according to risk and business impact.
Vulnerability assessments provide practical findings to help improve your security posture.
How vulnerability scanning works
Continuous vulnerability management is one of the most fundamental cyber security services an organisation can perform, and is considered one of the basic controls by the Center for Internet Security (CIS).
Vulnerability scans can be performed at various layers of the technology being tested. For example, a web server can be tested at the web application layer and at the server layer to assess the configuration of the host platform.
In plain terms, if your application or network device is a locked door, a vulnerability scan tries to identify all the known keyholes in that door. It doesn’t attempt to open the locks – that’s what penetration testing does.
Types of scans MIST performs
- External scanning of the network perimeter
- Internal scanning of devices inside the network
- Web application scanning (with or without credentials)
- One-time vulnerability scans
- Continuous vulnerability scans (e.g. monthly or quarterly)
Targets we can scan
- Laptops, desktops and any connected device with an IP address
- Servers (on-premises or cloud-hosted)
- Network security devices (e.g. firewalls)
- Websites and applications
Vulnerability assessments vs penetration tests
The two terms are often used interchangeably but are different services. A vulnerability assessment is like a thief noting all your points of entry and the locks you have in place. Penetration testing, on the other hand, is actually picking the lock and getting inside – with permission. See our External Penetration Tests and Internal Post Incident Testing services.
What is a compromise assessment?
A compromise assessment is a proactive survey of networked devices (such as Windows desktops) to detect threats that have evaded existing security controls. The goal is to reduce attacker dwell time – catching them before they do damage – and to regularly measure the effectiveness of your security posture with hard evidence of the forensic state of your endpoints. Any threat assessment should be:
Effective
Focused on identifying evidence of malware, remote access tools and unauthorised access.
Fast
Planned around the size, complexity and access requirements of your environment.
Affordable
So a typical organisation can conduct it proactively and regularly (weekly, monthly or quarterly).
Independent
Not reliant on detection tools already in the environment.
Why choose MIST?
The MIST methodology uses advanced tools, techniques and procedures to enumerate, identify and report on your existing security posture.
We can perform an advanced vulnerability scan and penetration test while simultaneously hunting for and identifying advanced persistent threats already embedded in your network. MIST gives you the insight and cyber intelligence you need to be proactive.
Let’s talk
Ready to take the pressure off your IT?
Our Australian-based team is ready to help. Call 0488 687 777 or email sales@mist-integration.com.au and we’ll get back to you as quickly as possible.