Glossary: Compliance, Privacy and Penetration Testing

Vulnerability scan

Also written: vulnerability scans

An automated tool run that lists known weaknesses but doesn't prove impact. It runs often, and PCI DSS requires external ones quarterly by an ASV.