Internal Vulnerability Scanning

Internal vulnerability scanning is the process of testing for security vulnerabilities from inside a private network. The scanning software is installed inside the network and sends requests to discover and test all of the devices on the network, even if they are not addressable via the public internet.

External vulnerability scanning is conducted from outside the network over the public internet. The scanner has the same view as an outside attacker. Whereas internal scanning has the view of an attacker who has gained a foothold inside the network - for example: through phishing, malware, or a compromised device.

Both external and internal scans are important components of cybersecurity programs and required by many certification standards. By running regular internal scans, organizations can: