Vulnerability Assessment
Infrastructure-level vulnerability scanning powered by Nessus Professional. Identifies CVEs, misconfigurations, and patch gaps across your external systems.
Included in every pentest. Nessus infrastructure scanning is a standard part of our $30 Penetration Test. Don't need it? Opt out and save $5 ($25 pentest without Nessus/VA).
What's Covered
The Nessus Difference
Nessus Professional is the industry-standard vulnerability scanner, trusted by security teams worldwide. While web scanning focuses on application-layer issues, Nessus provides deep infrastructure-level analysis:
- CVE detection — identify known vulnerabilities in operating systems, services, and software
- Patch verification — confirm whether security patches have been properly applied
- Configuration auditing — detect misconfigurations in network services, SSH, TLS, and more
- Compliance checks — assess against CIS benchmarks and common security baselines
How It Fits
Vulnerability assessment runs alongside web scanning and penetration testing in a unified pipeline:
Reconnaissance & Discovery
Web scanning maps your attack surface — subdomains, open ports, running services, and technology stack.
Nessus Infrastructure Scan
Nessus Professional runs a comprehensive vulnerability scan, identifying CVEs, misconfigurations, and patch gaps across your external infrastructure.
Correlated Analysis
AI and human analysts correlate Nessus findings with web scanning and exploitation results, deduplicating and prioritising everything into a unified report.
Internal Network Scanning
Need to scan internal infrastructure? Install our lightweight Cloudflare Tunnel agent on any machine inside your network. It creates a secure, encrypted connection from your LAN to our scan engine — no firewall changes or VPN required.
- Single binary, zero dependencies
- Available for Windows, macOS, and Linux
- Full Nessus Professional scan of internal assets
- +$5 per internal host — same as any additional host
Best For
- Businesses needing compliance-ready vulnerability assessments
- Organisations with exposed infrastructure beyond just web applications
- Teams preparing for SOC 2, PCI DSS, or HIPAA audits
- Anyone wanting CVE-level visibility into their external systems