The process of discovering, analyzing, and reporting on security flaws and vulnerabilities. Vulnerability scans are conducted via automated vulnerability scanning tools to identify potential risk exposured and attack vectors across an organization’s networks, hardware, software, and systems.