Vulnerability assessment is the ongoing, regular process of defining, identifying, classifying and reporting cyber vulnerabilities across endpoints, workloads, and systems.
Most often, vulnerability assessments are automated using a security tool provided by a third-party security vendor. The purpose of this tool is to help the organization understand what vulnerabilities exist within their environment and determine the priorities for remediation and patching.