Vulnerability Management
Know your exposure. Before you commit to a full pentest.
What We Cover
What our vulnerability assessment includes
Our vulnerability assessment service provides comprehensive scanning against your internal or external networks with manual validation of high-risk findings to eliminate false positives and prioritise remediation.
External Attack Surface Discovery
Identify exposed services, outdated systems, and known vulnerabilities across public IPs and cloud assets that are accessible from the internet.
Internal Network Vulnerability Scan
Automated scanning of internal networks to uncover missing patches, insecure services, and misconfigurations across hosts, servers, and network devices.
Operating System & Software Vulnerabilities
Detection of outdated OS versions, unpatched software, and CVE-prone applications across your environment with severity-rated findings.
Misconfigurations & Weak Defaults
Identification of insecure defaults such as open ports, weak protocols, default credentials, and unnecessary services that increase your attack surface.
Network Services & Protocol Issues
Assessment of DNS, SMB, RDP, HTTP, SSH, and other core services for security gaps, configuration weaknesses, and version vulnerabilities.
Cloud Surface Vulnerability Scan
Scanning of Azure, AWS, or GCP assets for misconfigurations and outdated services as part of a mixed-environment assessment.
Pricing
From £700 / day
based on the number of assets in scope
Pricing is based on the number of assets in scope - whether internal hosts, external IPs, virtual machines, cloud instances, or mixed environments. A 30-minute scoping call is free and gets you a fixed written quote.
No obligation · Strictly confidential · Quote within one business day
Pricing Examples
| Light Assessment 1-2 days (small office / single-site) | From £700 |
| Advanced Assessment 3-4 days (medium organisation) | From £2,100 |
| Enterprise Assessment 5+ days (large / multi-site) | From £3,500 |
What's Included
- Scanning and manual validation of high-risk findings
- False positive removal and prioritisation
- Clear remediation guidance with actionable steps
- Report within 2 business days of assessment completion
- No obligation quote, all enquiries are fully confidential
Indicative ranges only. Your exact price is confirmed after a short scoping conversation - see full service pricing .
Assessment Tiers
Choosing the right assessment size
Light Assessment (1-2 days)
Ideal for small office networks or single-site deployments with 1-2 subnets and limited public-facing services. A quick hygiene check for patching status and configuration.
Advanced Assessment (3-4 days)
Suitable for medium-sized organisations with 100-500 hosts or IPs across internal, external, and cloud environments. Includes mixed infrastructure and compliance-oriented reporting.
Enterprise Assessment (5+ days)
For large or multi-site organisations with 500+ hosts, multi-network or hybrid infrastructure. Includes cloud assets, multiple applications, and prioritised reporting for management and technical teams.
Common Questions
Vulnerability assessment - frequently asked questions
A vulnerability assessment identifies and prioritises known vulnerabilities through scanning and validation. A penetration test goes further - it actively attempts to exploit identified vulnerabilities to demonstrate real-world impact and attack paths. Vulnerability assessments are often a useful precursor to penetration testing, or a cost-effective option for regular hygiene checks.
It depends on the framework. Some requirements (like Cyber Essentials) can be satisfied with vulnerability scanning. Others (like PCI DSS Requirement 11.4) specifically require penetration testing. We can advise on what your specific compliance requirement needs during a scoping call.
Commercial vulnerability scanners generate significant false positives and require expert interpretation. Our service includes manual validation of high-risk findings to confirm exploitability, contextualise risk, and eliminate noise - ensuring your team spends remediation time on issues that genuinely matter.
Yes. Mixed environments including on-premise servers, cloud-hosted assets, and VMs are all in scope. We scope by asset count and type rather than deployment model.
Ready to understand your vulnerability exposure?
Our team are on hand to discuss your security requirements and provide an assessment scope that meets your needs. Get a fixed quote within 24 hours.