Yes, when performed with the target’s consent, vulnerability management scanning is completely legal. In fact, this procedure can help reinforce your security posture and ensure you improve compliance with security standards and regulations.