While vulnerability scanning is regularly viewed as attempting to effectively recognize in the event that weakness is available by playing out some sort of rule-based test, passive scanning is the point at which no test is performed and instead network traffic or logs are surveyed to deduce the off chance that weakness is possibly present. This kind of examination is commonly found in high -risk conditions, for example, an OT environment or where a functioning sweep could adversely affect the presentation for example installment handling in monetary organizations.