> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Continuous Vulnerability Scanning

> Automatically scan APIs, applications, servers, and cloud assets for vulnerabilities on a recurring schedule.

<Tip>
  Modern attack surfaces change daily. Continuous scanning ensures vulnerabilities are caught before attackers find them.
</Tip>

***

## Why Continuous Scanning Matters

New deployments, configuration changes, and forgotten services can silently introduce risks.\
Without ongoing scanning, vulnerabilities may remain undetected for weeks or months.

Continuous scanning helps organizations:

<Check>Catch vulnerabilities as soon as they appear</Check>
<Check>Maintain compliance with security policies & regulatory frameworks</Check>
<Check>Detect regressions introduced by new releases</Check>
<Check>Ensure all assets remain monitored over time</Check>

***

## What Problem This Solves

<CardGroup cols={3}>
  <Card title="Blind Spots Over Time" icon="eye-slash">
    Assets drift, configs change, and new services go live unnoticed — continuous scans prevent visibility gaps.
  </Card>

  <Card title="Slow Vulnerability Discovery" icon="clock">
    Without automated scanning, security teams rely on manual tests that happen too late.
  </Card>

  <Card title="Operational Security Debt" icon="triangle-exclamation">
    Unpatched vulnerabilities accumulate silently, increasing long-term risk.
  </Card>
</CardGroup>

***

## How Snapsec Performs Continuous Scanning

<Steps>
  <Step title="Discover All Assets Automatically">
    APIs, web apps, servers, and cloud surfaces are auto-discovered using ASM and synced to the scanner.
  </Step>

  <Step title="Run Scheduled Recurring Scans">
    Snapsec runs daily, weekly, or custom recurring scans without human intervention.
  </Step>

  <Step title="Detect CVEs, Misconfigs & OWASP Issues">
    The engine analyzes headers, SSL, authentication, exposures, server signatures, and known vulnerabilities.
  </Step>

  <Step title="Correlate Findings With Asset Inventory">
    Each issue is linked to its exact asset, owner, and risk category.
  </Step>

  <Step title="Auto-Sync Results to VM">
    Vulnerabilities are forwarded to Snapsec VM for triage, SLA tracking, and remediation workflows.
  </Step>
</Steps>

***

## Key Benefits

<Columns cols={2}>
  <Card icon="shield-halved" title="Always-On Protection">
    Detect risks immediately instead of waiting for quarterly or annual checks.
  </Card>

  <Card icon="arrows-rotate" title="Automatically Updated Coverage">
    New assets and subdomains are added to scan cycles instantly.
  </Card>

  <Card icon="chart-line" title="Compliance-Ready Monitoring">
    Maintain continuous audit logs and pass compliance checks like SOC2, ISO 27001, and PCI.
  </Card>

  <Card icon="bug" title="Early Vulnerability Detection">
    Resolve issues before they escalate into real threats.
  </Card>
</Columns>

***

## Example Findings From Continuous Scanning

<Danger>
  HTTP Security Headers Missing\
  — Web app missing X-Frame-Options, CSP, HSTS.
</Danger>

<Danger>
  Outdated Server With Known CVEs\
  — Apache/2.4.49 vulnerable to path traversal.
</Danger>

<Danger>
  Publicly Accessible Admin Interface\
  — Admin panel exposed to the internet.
</Danger>

<Danger>
  Weak SSL Configuration\
  — TLS 1.0 enabled or weak cipher suites detected.
</Danger>

***

## Next Steps

<Card title="Set Up Automated Scan Schedules" icon="arrow-right">
  Configure daily or weekly scans for all asset groups.
</Card>