Being exploited now
Flaws actively used by attackers are flagged first using the CISA KEV catalog.
Managed IT services
Vulnerability scanning and vulnerability management
CloudCentric checks computers, servers and websites against known flaws for businesses across Charleston and the Lowcountry, prioritizing vulnerabilities actively exploited in the wild.
Device and software inventory
Checking devices and software against public records of known flaws
CloudCentric provides a running list of your machines and software, each checked against CVEs. Exposed systems are ranked by severity so work begins in the right place.
- 1
Device and software inventories
Inventories record devices and software, alongside browser extensions and digital certificates, across your organization.
- 2
Checked against known flaws
Each listed item is checked against the public list of known flaws to identify exposure.
- 3
Exposed items ranked
Exposures are ranked by severity so you and our team know where remediation work begins.
Vulnerability scanning for compliance requirements
Auditors, clients and insurance applications ask how businesses find out what is out of date. Vulnerability scans provide evidence for these requirements.
Requirement or question
Jump to scanner views
Microsoft Defender Vulnerability Management scanner screens
CloudCentric uses Microsoft Defender Vulnerability Management to check systems. Screen captures show how devices and known flaws are listed and tracked.
CISA KEV catalog flags actively exploited vulnerabilities first
Vulnerabilities exploited in the wild come first. CISA describes its catalog as the authoritative source of these flaws, recommending organizations use it as an input to their prioritization.
Likelihood of exploitation
Exploit Prediction Scoring System scores assign a probability between 0 and 1 that a flaw will be exploited.
Devices that matter most
Critical systems and exposed devices receive higher priority during remediation efforts.
Vulnerability assessment compared to a penetration test
Scanning finds known signatures, while testing involves human validation. CloudCentric offers separate penetration testing services.
Vulnerability scan
- Scans list known signatures across your devices and software.
- Automated checks do not confirm findings are real or exploitable.
- Some automated scan findings are false positives.
Penetration test
- Penetration tests are led by a person.
- Testers validate findings to confirm they are real.
- Human testers chain vulnerabilities together to prove exploitability.
Tracking laptops away from office networks
Devices leaving your office remain checked because scanners keep monitoring when laptops are away from corporate networks. Unmanaged Windows machines are reached with credentials. Call to review reports and map out your next steps.
Frequent questions about vulnerability scanning
- What is a vulnerability scan and what is a CVE?
Vulnerability scans check your computers against public lists of known flaws. CVEs are public identifiers for specific known flaws in products, letting flaws be tracked across scanners and vendors.
- How does scanning differ from a penetration test?
Scans list known signatures without confirming they are real or exploitable, resulting in false positives. Penetration tests are led by a person who validates findings and chains them together.
- How are exploited vulnerabilities put first?
Flaws actively exploited in the wild are flagged first using the CISA Known Exploited Vulnerabilities catalog. Each CVE carries a probability score for exploitation to prioritize work.
- Does scanning cover laptops that leave the office?
Built-in and agentless scanners keep monitoring devices even when disconnected from corporate networks. Unmanaged Windows devices are also scanned regularly using credentials to reach them remotely.
- Does a scan satisfy PCI, the FTC Safeguards Rule or client questionnaires?
Scans provide part of the evidence rules or clients ask for. External PCI scans are run by an Approved Scanning Vendor; confirm requirements with your acquiring bank. Call us to discuss.
- What happens to a finding once it is found?
Exposures feed straight into patching. Fixes are sent as remediation tasks to Microsoft Intune or blocked when no fix exists. Fix times are not stated here; call to discuss rapid patching.
- What systems does scanning cover?
Microsoft Defender Vulnerability Management delivers visibility and assessments for Windows, macOS, Linux, Android, iOS and network devices. Prices and device limits are not stated here, so call to discuss your environment.
Start scanning your devices for known flaws
Call CloudCentric to review your device inventory and see where your systems stand.
CharlestonMount PleasantNorth CharlestonIsle of PalmsFolly BeachKiawahBeaufortBlufftonHilton HeadSavannah