🎯 What You'll Learn
- Distinguish assessment from penetration testing
- Run and tune vulnerability scans
- Validate and de-duplicate findings
- Prioritise remediation by risk
About This Workbook
Not every engagement is a full pentest. This workbook covers vulnerability assessment: scanning, validating results, prioritising by risk and communicating remediation.
Chapter 1 — Assessment vs Pentest
Knowing which engagement fits the goal.
- Scope and depth
- Outcomes
- When to use each
Chapter 2 — Scanning
Discovering weaknesses at scale.
- Scanner types
- Authenticated scans
- Tuning
Chapter 3 — Triage & Prioritisation
Turning raw findings into action.
- Validating results
- Scoring and risk
- Remediation guidance
Keep going. Work through each chapter in order, then apply what you learned in the matching labs.