Tagged vulnerabilities

Assess AD posture with PingCastle, BloodHound and Purple Knight for misconfigurations

Scan hosts and cloud snapshots for vulnerabilities without installing endpoint agents

Score asset criticality from data, business and exposure to weight vulnerability fixes

Run credentialed OpenVAS scans over SSH or SMB to find missing patches and misconfigs

Plan credentialed scans with Nessus, Qualys or InsightVM to inspect patches and configs

Scan images, repos and clusters with Trivy for CVEs, IaC issues and leaked secrets

Rank CVEs using the CISA KEV catalog with EPSS and CVSS for BOD 22-01 deadlines

Rank endpoint CVEs by risk, deploy patches and validate that fixes stuck

Check IP reputation with Shodan for open ports, services and known vulnerabilities

Run OT vulnerability assessments with Claroty xDome for asset discovery and risk scoring

Scan OT and ICS networks for vulnerabilities without crashing fragile legacy controllers

Probe web apps for SSRF through cloud metadata endpoints and IP encoding bypasses

Build a sector threat landscape report from threat actors, TTPs and exploited CVEs

Run authenticated Nessus scans to find CVEs, default credentials and missing patches

Triage Burp and ZAP findings to confirm real issues and rank fixes by risk

Score vulnerabilities with CVSS v4.0 to rank remediation by severity

Scan container images, filesystems and SBOMs for CVEs with Anchore Grype

Scan Docker images with Trivy for CVEs, secrets and license issues in SARIF

Scan servers, network devices and workstations for vulnerabilities with Nessus

Run advanced Nmap scans with NSE scripts, timing and evasion options

Test exported Android components and intents for injection and data leaks

Find mass assignment bugs by adding hidden fields like role or isAdmin to requests

Find price, workflow and voucher logic flaws that scanners miss in Burp Suite

Test JWTs for alg none, key confusion and kid injection with jwt_tool

Find open redirects in next and return parameters and chain them into phishing

Test XML inputs for XXE, XPath injection and entity attacks that leak files

Test for reflected, stored and DOM XSS, then bypass sanitizers and CSP

Find and validate XSS with the Burp Suite scanner, Intruder and Repeater

Exploit XXE to read server files, run SSRF and exfiltrate data in pentests

Prioritize vulnerabilities with CISA SSVC decisions using KEV and EPSS data

Intercept and modify web traffic with Burp Suite to find web app vulnerabilities

Map EU Cyber Resilience Act duties for vulnerability reporting and product scope

Test web apps for directory traversal and local file inclusion vulnerabilities

Find insecure direct object references and broken access control in web apps

Build STRIDE and LINDDUN threat models with CVE and exploit-data dependency screens

Set up static analysis security scanners and write custom rules for your code

Run application security scans, vulnerability assessments and compliance checks

Learn common web vulnerability classes like injection, access control and misconfigs

Prioritize vulnerabilities by attack surface, OWASP 2025 and supply chain risk

Review code against a security checklist to find vulnerabilities

Audit dependencies for CVEs, license conflicts and safe upgrade paths

Run SAST and DAST scans and plan CVE remediation for applications

Fix Security Command Center findings for IAM, misconfigurations and vulnerabilities

Audit applications for OWASP Top 10 flaws and CVEs using pentest methods

Audit code and infrastructure for vulnerabilities and rank findings by severity

Fix a confirmed security vulnerability and check that the fix holds

Import Snyk, Semgrep, GitHub and Wiz findings locally or into Codex Security Cloud

Review a pull request, commit or diff for security vulnerabilities

Verify that a security fix actually closes a reported vulnerability