Internal vulnerability scanning

General information about internal vulnerability scanning

Internal vulnerability scanning is the procedure for scanning applications, systems, devices, or networks for potential security vulnerabilities within the network. Vulnerabilities contained in software and systems can be used by cybercriminals to penetrate networks of organizations in order to carry out cyberattacks.

Who needs to perform internal vulnerability scanning?

Internal vulnerability scanning is recommended for any organization. But if an organization has (or plans to have) PCI DSS certification, internal vulnerability scanning is mandatory (requirement 11.2.1).

How often should I perform internal vulnerability scanning?

Internal vulnerability scanning according to PCI DSS requirements should be performed at least once a quarter or in the event of significant changes in the architecture, infrastructure, or network of an organization.

The internal scanning service includes:

  • An annual subscription for internal network scanning.
  • Internal network scanning every 90 days by a specialist.
  • Reports and recommendations after each scan.
  • Repeat scanning by a specialist after fixing the identified vulnerabilities.

The IT Specialist company has top-notch specialists in penetration testing

Do you have any questions about internal vulnerability scanning? Write to us, and we’ll be happy to provide answers and advice!