Skip to content

Glossary: Vulnerability, Asset and Change Management

Credentialed scan

Also written: authenticated scan

A scan that logs in, over SSH or with an admin account, and reads exact package versions and settings. It finds more and gives fewer false positives, so give the scanning account read-only rights.

Where the book teaches it

Related terms

Non-credentialed scanAgent-based scanFalse positive