A program that performs the diagnostic phase of an analysis, also known as a computer assessment: A vulnerability scanner analysis defines, identifies, and classifies the security holes (vulnerabilities) in a computer, server, network, or communications infrastructure.

In addition, a vulnerability scanner functions as an analysis which can forecast the effectiveness of proposed countermeasures, and evaluate how well they work after they are put into use.