A vulnerability scanner is a tool that helps organizations detect security vulnerabilities in their networks, systems and applications that could potentially be exploited by cybercriminals. Based on different configurations and scripts, vulnerability scanning tools run tests on assets that could be exploited. Overall, they bring to light information about the vulnerabilities in an IT environment, degrees of risk from each vulnerability and ways to mitigate a vulnerability.