Where Does the Scanner Run?

About this interactive

The Vulnerability Scans lesson describes four ways to deploy scanning software. On premises: the software is downloaded and installed on one of your own servers. Its data stays local and never goes out to the cloud. Cloud-hosted: the scanner runs as software as a service in the vendor's cloud, and your team uses it from there. Hybrid: some of the scanning runs on your own servers and some in the cloud. Managed service: you subscribe to another company, such as a security operations center, that sets up, runs and monitors the scans for you. The difference between cloud-hosted and managed is who does the work. With a cloud-hosted scanner your own team launches the scans and reads the results. With a managed service, the provider's people do. A quick test for each card: where does the scanning software run, and whose people run it?

What you'll learn

Name a vulnerability scanner's deployment model: on premises, cloud-hosted (software as a service), hybrid, or a managed service
Tell a cloud-hosted scanner the team runs itself from a managed service where another company runs and watches the scans

Aligned to

CompTIA Security+

4.4 Explain security alerting and monitoring concepts and tools.

4.3 Explain various activities associated with vulnerability management.

CompTIA CySA+

2.1 Given a scenario, implement vulnerability scanning methods and concepts.

NIST 800-53

RA-5 Vulnerability Monitoring and Scanning

Key terms

Vulnerability Assessment: The process of identifying, quantifying, and prioritizing vulnerabilities in a system.
On-Premises: An infrastructure deployment model in which hardware and software are hosted locally within an organization's own facilities rather than in a cloud provider's data center. On-premises deployments give organizations full control over their security posture.
Software as a Service: A cloud service model that delivers software applications over the internet on a subscription basis.
Managed Security Service Provider: Managed Security Service Provider is a third-party organization that provides outsourced monitoring, management, and response for security devices and systems on behalf of client organizations.
Security Operations Center: A centralized team and facility responsible for monitoring, detecting, and responding to security incidents.

Topics

Vulnerability Management Vulnerability Scanning Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →