Some vulnerability scanners available
- Nessus
- Qualys
- Retina eEye
- ISS Internet Security Systems
- Rapid7 Nexpose
Products will be set up in typical configurations with default values for security settings. If documentation exists that details best security practices for configuring the product, the product will also be tested after having been configured accordingly. Thus, in some cases it may be necessary to scan multiple configurations
False positives will be recorded in a public facing location
