Patch Management
OS and third-party patches tested, scheduled, and reported on.
Vulnerability assessment services with a ranked fix list
A free first assessment scans your internal and external network and ranks each finding critical, high, medium, or low. It's for mid-market companies that want to know what's exposed before an attacker does. You get a fix list in severity order. On Security as a Service, ongoing scans and the fixes are part of the monthly fee.
At a glance
| Scan types | Internal and external |
|---|---|
| Severity ranking | Critical, high, medium, low |
| Covers | Computers, network, and communication equipment |
| First assessment | Free |
| Ongoing scans and fixes | Included in Security as a Service |
Outcomes
What you get
Ranked by severity
Scans find vulnerabilities and misconfigurations, then we rank them so the critical items get fixed first.
Both sides of the firewall
External scans show what the internet sees. Internal scans show what an infected laptop or a bad actor could reach once inside.
Fixes come with the scans
On Security as a Service, we do the patching and configuration work. No handoff to another company for the fixes.
Process
How it works
Step 1: Scope
We agree which sites, networks, and public IP addresses are in scope.
Step 2: Scan
We run internal and external scans across your computers, network gear, and communication equipment, looking for missing patches and misconfigurations.
Step 3: Rank and report
Each finding gets a severity (critical, high, medium, or low), with the affected device and the fix.
Step 4: Fix and rescan
On Security as a Service, we patch and reconfigure, and ongoing scans catch new issues as your network changes.
Related
Services that work with this one
Pairs well with
Consulting & Virtual CIO
An IT roadmap, a budget, and quarterly reviews with your leadership.
Weighing your options?Penetration test vs vulnerability assessment
FAQ
Frequently asked questions
What does the free vulnerability assessment include?
Your first assessment is free. We'll confirm exactly what it covers on the consultation call.
How is this different from a penetration test?
A vulnerability assessment finds and ranks known weaknesses across your network. A penetration test goes further and tries to use those weaknesses, to show what an attacker could reach. We recommend ongoing scans plus a pen test at least once a year.
Is one scan enough?
Ongoing beats once. A single scan is a snapshot. New vulnerabilities are published every week and your network changes too, with new laptops, new apps, and new firewall rules. That's why ongoing scans come with Security as a Service.
Do you fix what you find, or just report it?
We fix it on Security as a Service. No handoff to another company for the fixes. If your IT team would rather do them, we hand them the ranked list.
What's in the report?
Every finding, ranked critical, high, medium, or low, with the affected device and the fix.
Does this help with PCI or HIPAA?
It supports both. PCI DSS asks for vulnerability scans, and PCI external scans must come from an Approved Scanning Vendor, so we'll confirm that part with you. HIPAA asks for a risk analysis, and our scan results feed it.
What does a vulnerability assessment cost?
The first one is free, and ongoing scans and fixes are part of the Security as a Service monthly fee.
Last updated
Talk to our team about Vulnerability Assessment
Tell us what you run today and what you want fixed.
We reply within one business day.
- Sales
- (214) 447-0244
- Support
- (972) 591-0151
- sales@sanapptx.com
- HQ
- 5700 Tennyson Parkway
Plano, TX 75024