FAQs
Have Questions?
What is the difference between vulnerability scanning and penetration testing?
Scanning is automated. It finds known weaknesses across many systems quickly. Penetration testing is manual. A human tester tries to use those weaknesses the way an attacker would. Scanning tells you the doors that might be unlocked. Pen testing tells you which ones actually open and what is on the other side.
How often should we scan our environment?
For most small businesses, continuous or weekly scanning produces meaningfully better results than monthly or quarterly. New vulnerabilities are disclosed every day, and the window between disclosure and active exploitation has shrunk to about two weeks. CinchOps scans clients on a continuous cadence.
Will scanning slow down our systems?
Modern scanners have a minimal performance footprint when configured correctly. CinchOps schedules intensive scans during off-peak hours when needed and uses lightweight agents on production systems. Most clients see no user-visible impact from continuous scanning.
Do you scan cloud services like Microsoft 365?
Yes. Cloud configuration scanning catches misconfigured permissions, exposed sharing links, weak admin settings, and other issues that traditional scanners miss because they only look at on-premises systems. Microsoft 365 misconfiguration is now one of the most common attack vectors for SMBs.
How does scanning fit with our cyber insurance requirements?
Cyber insurance applications now ask specifically about vulnerability scanning cadence and patch management. CinchOps provides documentation showing scan frequency, findings, and remediation timelines. That documentation supports renewal applications and reduces friction at audit time.