Core service
Vulnerability Assessment and Validation
Broad vulnerability discovery combined with expert validation and risk-based prioritisation.
Vulnerability assessment provides systematic coverage across a defined asset set. Safestorm supplements tool-assisted discovery with manual verification, removes avoidable false positives and considers exploitability, exposure and business impact so remediation teams can focus on the weaknesses that matter most.
Founder-led technical delivery
Why Safestorm for this assessment
Felix founded Safestorm around a simple principle: a potential scanner finding is not equivalent to a demonstrated security risk. His approach uses offensive-security experience to validate what is genuinely exploitable, recognise useful attack-chain context and translate technical evidence into guidance remediation teams can act on.
- More than six years’ offensive-security experience
- OSCP and OSEP certified
- Red teaming, adversary simulation and control validation
- Published IPv6 research presented at BSides London
Felix’s prior experience includes identifying high-impact weaknesses in healthcare environments. Client identities and engagement details remain confidential.
What the assessment covers
Final coverage is agreed during scoping and reflects your technologies, user roles, threat model and operational constraints.
- Asset discovery and authenticated or unauthenticated scanning as agreed
- Operating systems, network services, common platforms and exposed software
- CVE identification, patch status and unsupported or end-of-life components
- Configuration weaknesses, default exposure and unnecessary services
- Manual verification of material findings and scanner discrepancies
- Review of public exploitation evidence and known-exploited status where relevant
- Contextual prioritisation using exposure, prerequisites and compensating controls
- Retesting to confirm that priority remediation is effective
Common risks identified
Testing is not limited to this list. These examples illustrate the types of material risk the assessment is designed to uncover.
- Critical known vulnerabilities hidden within a large volume of scanner output
- False positives consuming remediation time and reducing confidence
- Internet-facing or privileged assets receiving the same priority as low-impact systems
- Unsupported products and recurring configuration weaknesses remaining unmanaged
- Individual vulnerabilities becoming material when chained with access or trust weaknesses
A controlled process
How the engagement works
- Step 1
Confirm assets, ownership, scan method and operational constraints
- Step 2
Arrange credentials and safe scan windows where authenticated coverage is required
- Step 3
Discover assets and perform calibrated tool-assisted assessment
- Step 4
Validate material results and investigate ambiguous findings manually
- Step 5
Prioritise using exploitability, exposure, impact and compensating controls
- Step 6
Deliver remediation data, debrief owners and retest agreed findings
Who this service is suitable for
- Larger asset estates requiring broad, time-bound vulnerability coverage
- Teams seeking independent validation of existing scanner findings
- Organisations establishing or improving vulnerability-management processes
- Environments requiring prioritised remediation evidence before deeper testing
Not sure whether this is the right assessment? Safestorm can help define the assurance question before recommending a scope.
Methodology and industry references
Testing is risk-led and tailored rather than reduced to a checklist. Relevant, recognised guidance helps structure coverage and communicate results.
- FIRST CVSS v4.0
- CISA Known Exploited Vulnerabilities Catalog
- FIRST Exploit Prediction Scoring System
Referencing a framework does not represent certification against it or guarantee compliance with every control.
Frequently asked questions
How is this different from penetration testing?
A vulnerability assessment prioritises breadth across an asset set and validates discovered weaknesses. A penetration test provides deeper investigation of a defined target, trust boundary or attack objective. They answer different assurance questions.
Is authenticated scanning recommended?
Where safe and practical, authenticated scanning usually provides stronger visibility of installed software, missing patches and local configuration. Credentials are handled under agreed security and data-handling arrangements.
Do you rely on CVSS scores alone?
No. CVSS communicates technical severity, but remediation priority also considers exposure, exploit prerequisites, known exploitation, affected data, business importance and available compensating controls.
Define the right scope
Tell us what you need to assess, your timescale and the assurance outcome you need. We will propose a proportionate scope and clear rules of engagement.
Discuss your requirements