Agree the assessment scope
Target assets
- Public IPs
- Domains
Testing condition
Testing window
Agreed external asset scope
← Services
Xcitium offering
Vulnerability Assessment
Discovery and prioritization of infrastructure vulnerabilities. The assessment scans the network perimeter and selected assets, reporting identified risks and remediation guidance.
Discuss your requirements ↗
Perimeter assessment
From external exposure to remediation
Authorized internet-facing assets are identified, weaknesses are ranked by technical and business impact, and the report gives teams clear next steps.
Find exposed weaknesses
- Open ports
- Software versions
- Perimeter services
Validated vulnerability findings
Rank findings by risk
- Validated findings
- CVSS ratings
- Business context
Findings ranked by risk
Plan remediation steps
- Review guidance
- Assign owners
Monthly report and reporting portal access
01
Agree the assessment scope
The assessment focuses on infrastructure exposed to the internet. The parties identify public IP addresses, domains, asset owners, exclusions and a testing window so scanning covers only systems that have been authorized.
Assessment inputs
- Public IPs
- Domains
- Testing window
What happens
- List the assets
- Confirm authorization
Deliverable
Agreed external asset scope
02
Find exposed weaknesses
Automated scanning examines the perimeter for open ports, weak firewall rules, outdated software, exposed services and internet-facing devices. Security professionals review automated results and document additional observations that need attention.
Assessment inputs
- Open ports
- Software versions
- Perimeter services
What happens
- Run the scan
- Review findings
Deliverable
Validated vulnerability findings
03
Rank findings by risk
Each finding is assessed for severity, exploitability and potential business impact. CVSS ratings and Critical, High, Medium and Low categories help the technical team decide which weaknesses deserve attention first.
Assessment inputs
- Validated findings
- CVSS ratings
- Business context
What happens
- Assess impact
- Set priorities
Deliverable
Findings ranked by risk
04
Plan remediation steps
Each monthly report gives a CVSS risk rating and remediation or interim mitigation guidance for every finding. Reports remain available through the dedicated reporting portal; the team reviews recommendations with asset owners and assigns responsibility for fixes.
Assessment inputs
- Risk ranking
- System owners
- Existing controls
What happens
- Review guidance
- Assign owners
Deliverable
Monthly report and reporting portal access
The result is a prioritized view of risk across the authorized perimeter, with a practical remediation direction for each finding.
Capabilities
Fit the way your team works
Core capabilities
The assessment scans the network perimeter and selected assets, reporting identified risks and remediation guidance.
Deployment and fit
Scope, authorized targets and test windows are agreed in advance. This service is distinct from continuous monitoring and penetration testing.
Compare approaches
Service role and adjacent approach
| Consideration | Vulnerability assessment | Continuous vulnerability management |
|---|---|---|
| Primary focus | Internet-facing asset weaknesses. | Ongoing discovery and prioritization as the environment changes. |
| Workflow | Scan authorized perimeter and validate findings. | Recurring inventory, exploit context and remediation tracking. |
| Output and handoff | CVSS-ranked remediation report. | Current risk list and remediation workflow. |
Before you start
Agree the scan scope
Document asset owners, authorized IPs and hosts, scan origin, exclusions and change window. Review findings with the team that owns remediation.
- 01
Which IPs, cloud assets and hosts are authorized?
- 02
What window and stop condition apply to production systems?
- 03
Who tracks remediation and risk acceptance for findings?
Evidence for your evaluation
In practice
A scoped review of selected systems
The IT team identifies perimeter and selected assets; authorized targets, test windows and possible impact are agreed in advance. These boundaries help fit the assessment to operations.
What your team gains
- 01
Scoped inventory of identified risks
- 02
Prioritized remediation guidance
- 03
Documented scope and limitations
Before you decide
Questions, answered
What does the assessment provide?
The assessment reports vulnerabilities found within the agreed scope, their priorities and remediation guidance.
Is this the same as a penetration test?
No. An assessment scans for weaknesses; a penetration test actively validates exploitability on agreed targets.
What needs agreement before scanning?
Agree targets, authorization, exclusions, timing and production stop conditions in writing.
Next step
Discuss your requirements
Tell us about your environment and priorities to discuss the right solution, pilot scope and rollout in Azerbaijan.