Vulnerability Scanner
A vulnerability scanner is a software tool that automatically identifies known security vulnerabilities in systems, networks, or applications.
“A static analyzer that is used to detect particular security vulnerabilities in the code.”
(Definition reproduced from the ISTQB Glossary. Copyright belongs to ISTQB.)
View the complete ISTQB GlossaryWhat is Vulnerability Scanner?
Scanners compare systems against vulnerability databases to detect missing patches, insecure configurations, and known weaknesses.
Automated detection: Quickly identifies known issues.
Database driven: Uses continuously updated vulnerability information.
Real World Example
A regulated product team is preparing a release where Vulnerability scanner appears in reviews, test design conversations, or defect triage rather than as an isolated glossary word.
The risk is that the team treats Vulnerability scanner as interchangeable with nearby ISTQB terms. That makes test scope blurry and can lead to weak evidence for the release decision.
The tester anchors the discussion in the official definition, asks where the concept appears in the product, and designs examples that show the difference between Vulnerability scanner and similar ideas.
The page becomes useful in practice because Vulnerability scanner is connected to a specific testing decision, not memorized as a detached definition.
Practice Questions
Question 1
Which statement BEST describes Vulnerability scanner in the context of ISTQB terminology?
Question 2
A tester needs to explain Vulnerability scanner to a non‑technical stakeholder. Which approach is MOST appropriate?
Test your knowledge with real ISTQB-style questions
You’ve learned Vulnerability Scanner. Test your understanding with topic-specific questions in our Mock Exams.