A vulnerability scan performed by installed monitoring software should complete in around 30 minutes. A certified external vulnerability scan for security standards compliance should last between 30 and 90 minutes.