A method for generating, at a storage system, a plurality of scanned backup snapshots from a plurality of backup snapshots of a primary system, the method comprising: selecting a first backup snapshot among the plurality of backup snapshots, restoring in a temporary environment at least a portion of the first backup snapshot to create a restored instance of at least the portion of the first backup snapshot, performing a first vulnerability scan of the restored instance of at least the portion of the first backup snapshot to identify one or more first vulnerabilities, tracking the one or more first vulnerabilities of the scanned portion of the first backup snapshot in a data structure that is stored by the storage system, wherein tracking the one or more first vulnerabilities comprises storing a first indication of the one or more first vulnerabilities in the data structure and associating the first indication with the scanned portion of the first backup snapshot in the data structure; selecting a second backup snapshot among the plurality of backup snapshots, restoring in the temporary environment at least a portion of the second backup snapshot to create a restored instance of at least the portion of the second backup snapshot, performing a second vulnerability scan of the restored instance of at least the portion of the second backup snapshot to identify one or more second vulnerabilities, tracking the one or more second vulnerabilities of the scanned portion of the second backup snapshot in the data structure, wherein tracking the one or more second vulnerabilities comprises storing a second indication of the one or more second vulnerabilities in the data structure and associating the second indication with the scanned portion of the second backup snapshot in the data structure, and updating the stored data structure to associate the second indication of the one or more second vulnerabilities with the scanned portion of the first backup snapshot. selecting a first backup snapshot among the plurality of backup snapshots, restoring in a temporary environment at least a portion of the first backup snapshot to create a restored instance of at least the portion of the first backup snapshot, performing a first vulnerability scan of the restored instance of at least the portion of the first backup snapshot to identify one or more first vulnerabilities, tracking the one or more first vulnerabilities of the scanned portion of the first backup snapshot in a data structure that is stored by the storage system, wherein tracking the one or more first vulnerabilities comprises storing a first indication of the one or more first vulnerabilities in the data structure and associating the first indication with the scanned portion of the first backup snapshot in the data structure; selecting a second backup snapshot among the plurality of backup snapshots, restoring in the temporary environment at least a portion of the second backup snapshot to create a restored instance of at least the portion of the second backup snapshot, performing a second vulnerability scan of the restored instance of at least the portion of the second backup snapshot to identify one or more second vulnerabilities, tracking the one or more second vulnerabilities of the scanned portion of the second backup snapshot in the data structure, wherein tracking the one or more second vulnerabilities comprises storing a second indication of the one or more second vulnerabilities in the data structure and associating the second indication with the scanned portion of the second backup snapshot in the data structure, and updating the stored data structure to associate the second indication of the one or more second vulnerabilities with the scanned portion of the first backup snapshot.