Purpose: The primary goal is to helps organizations proactively detect unpatched software, insecure configurations, and potential entry points that attackers could exploit.

Scope: Operating systems like Windows, Linux, macOS, networked servers and endpoints, system software and installed applications, host-based firewalls and antivirus configurations, active directory and domain controller settings (if applicable), open ports, running services, and listening processes, local user accounts and permissions, logging and auditing mechanisms.

Methodology: Testers scan hosts using industry-leading tools to detect known vulnerabilities, misconfigurations, and outdated software. The results are analyzed, and each issue is prioritized based on risk. 

Types of Assessment

Authenticated Scan: Preferred method using credentials to provide deeper and more accurate results.

Unauthenticated Scan: Limited view, used when credentials are not provided.