---
title: "Vulnerability management"
sidebar_position: 7
description: "What tools can be used to scan cloud platform products, services, and offerings for vulnerabilities "
toc_max_heading_level: 3
---

import Formbricks from '@theme/MDXComponents/Formbricks'

# Vulnerability management

## Cloud and dedicated servers \{#cloud-and-dedicated-servers}

We recommend scanning servers for vulnerabilities. This can be done using network vulnerability scanners or software agents on the hosts.

Network scanners check hosts that are accessible over the network, and some scanners also support authentication configuration for more accurate analysis.

To analyze vulnerabilities of public IP addresses belonging to your infrastructure in Selectel, you can use the [Vulnerability Scanning](/vulnerability-analysis/about-vulnerability-scanner.mdx) service. The service allows you to scan external IP addresses using a security analysis tool certified by FSTEC.

You can use free network scanners:

* [Nmap](https://nmap.org/);
* [OpenVAS](https://www.openvas.org/);
* [Zed Attack Proxy (ZAP) by Checkmarx](https://www.zaproxy.org/).

An example of a free scanner that runs as an agent on hosts is [Wazuh](https://documentation.wazuh.com/current/user-manual/capabilities/vulnerability-detection/how_it_works.html). To run the scanner, install it on each host:

* shared Wazuh server — for details, see the [Quickstart](https://documentation.wazuh.com/current/quickstart.html) article in the Wazuh documentation;
* Wazuh agents — for details, see the [Wazuh agent](https://documentation.wazuh.com/current/installation-guide/wazuh-agent/index.html) article in the Wazuh documentation.

You can [create a cloud server with a pre-installed Wazuh application](/cloud-servers/applications/wazuh.mdx#create-cloud-server-with-wazuh).

On Linux servers, you can also use [Lynis](https://github.com/CISOfy/lynis) — a security auditing and compliance tool at the host level. Lynis ensures operating system and application security by checking configurations, permissions, vulnerabilities and outdated packages, firewall settings, and critical system parameters.

On cloud servers, scanners can be installed in the form of [custom images](/cloud-servers/images/about-images.mdx#own-images).

<Formbricks />