Vulnerability assessment (VA) is a process of defining, detecting, categorizing, and prioritizing security vulnerabilities in a computer system, application, or network.
Organizations rely on vulnerability assessments to provide the crucial intelligence and risk context to understand and respond to cybersecurity threats.
The vulnerability assessment process aims to identify threats and their associated risks. It usually involves using an automated testing tool, such as a network security scanner. At the end of the process, a vulnerability assessment report lists the results obtained from the assessment tool.