PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Vulnerability Assessment Tools [Top Tools & What They Do]

hackerone.com | vulnerability | #cloud | #vulnerability-management | #automation | #network-security | #security-tools | #vulnerability-scanning | #security-testing | #tooling | #pentest | #vulnerability-assessment | #scanning-tools | #host-based
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Surveys popular vulnerability assessment tools, what they do, and their pros and cons, from ranking flaws for remediation to continuous scanning of networks and applications between pentests.
Published
Collected

Related coverage

blog · bugcrowd.com
Does agentic pen testing replace vulnerability scanning?
Bugcrowd on why agentic pen testing doesn't replace scanning: scanners flag what might be wrong, agentic testing proves what is exploitable, and layering both closes coverage gaps.
tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
blog · borghq.io
Autonomous Pentesting vs Vulnerability Scanning: What Each Finds
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · netspi.com
Security Orchestration vs. Automation: What's the Difference?
NetSPI clarifies the difference between security orchestration and automation: scripts handle single tasks, while orchestration connects systems into a consistent vulnerability lifecycle process.
blog · netspi.com
The Systems That Time Forgot
Forgotten test and legacy systems that escape asset management become easy entry points for attackers. The author outlines practical steps for discovery, inventory, and ownership.
Back