NEO answers the most common questions
A vulnerability assessment is a security review that scans a company's assets (IP addresses, domains and web applications) for known weaknesses and ranks them by severity. The result is a technical report that orders each finding by its business impact and shows what to fix first.
A vulnerability is a weakness in a system, application or configuration that could be used to compromise a company's information or operations. The most common ones are outdated software, insecure configurations and services exposed to the internet without need.
A vulnerability assessment identifies and prioritizes the weaknesses in your assets. A penetration test goes a step further and tries to exploit them to show how far an attacker could get. They complement each other: the assessment gives you the full map and the pentest gives you the proof. See our penetration testing services.
No. The deliverable is the prioritized report and the results session, a clear guide for your team to remediate in order. If you'd rather hand off the work, our managed cybersecurity services and TecnetSOC include managed patching of your devices.
We price it per asset: each IP address, domain, subdomain or web application counts as one unit, and the asset type doesn't change the price. We assess both internal and internet-facing assets. Send us your asset list and we'll prepare a proposal in USD.
At least once or twice a year, and always after major changes to your infrastructure such as new servers, applications or internet-facing services. Many compliance frameworks and enterprise clients ask for that frequency. For continuous coverage, TecnetSOC includes ongoing vulnerability management.
It shouldn't, because we coordinate it with you. We agree on scope and execution windows in your time zone so your day-to-day work isn't interrupted.
It doesn't include exploiting the findings (that's a penetration test), a retest, source code review, mobile apps, social engineering or cloud account configuration. Those scopes are quoted as separate services.