Vulnerability scanning checks your network, computers and internet-facing systems for known weaknesses: missing patches, outdated software, weak settings and exposed services. Attackers scan constantly. Safeguard scans first and tells you what to fix, in plain language.
Vulnerability scanning is part of the Safeguard™ platform.
01
02
A scan is an automated check for known issues, run regularly. A penetration test is a hands-on attempt by our analysts to break in, done at least once a year. You need both: scanning catches new issues as they appear, and a pen test shows how far an attacker could actually get.
HIPAA
HHS's proposed Security Rule update would require vulnerability scans at least every six months and a penetration test at least every 12 months. It is not final yet, but it shows where expectations are headed. More in does HIPAA require vulnerability scanning?
FAQ
At least quarterly is a good baseline, and more often is better. HHS has proposed a minimum of every six months.
Scans are designed to be safe for everyday systems and can be scheduled after hours.
Your IT provider, or ours. Reports include clear fix steps, and Safeguard tracks each item until it is resolved.
No. A risk assessment looks at your whole practice, including policies, people and physical security. A scan is one technical input to it.
Sources: 45 CFR 164.308, administrative safeguards · HHS fact sheet on the proposed Security Rule update. This page is general information, not legal advice.
Talk to an analyst about scanning, or start with the free risk assessment.
