Free Scan

Business and Consultant

Authenticated Linux vulnerability scanner for public servers

A remote scan sees only what a service shows from the outside. With authorized SSH access, ScanTitan can also read the installed Linux packages and match them to security advisories, alongside the public service checks it already runs. Results include CISA KEV and EPSS intelligence when it is available.

  • Linux package advisories
  • Read-only account, no sudo
  • Business and Consultant

Business costs $155 per asset place per year, billed annually. Choose the IP / server asset type.

Assess my serverSee how it works

Why remote checks alone are not enough

A public scan identifies the services a server exposes and the versions those services report. That is useful, but it is indirect evidence. A service can hide its version, and the operating system may carry fixes that the banner does not show.

Remote service evidence

What the server shows to the internet: open ports, service banners and observed behavior. Findings are matched to published CVEs by the version a service reports.

Installed package evidence

What is actually installed on the server: operating-system and package inventories read through SSH, matched to security advisories for that distribution.

Together they give a clearer result than either alone. The report keeps the two kinds of evidence separate so you can see which finding came from where.

How the authenticated Linux vulnerability scanner works

  1. Add the server. Use a public individual IP or server that you own or are authorized to test.
  2. Choose the assessment. Select Authenticated server assessment through SSH. The default is external service assessment only.
  3. Use a dedicated account. The scanner reads operating-system and package inventories with fixed commands. Give it an account with read access. Sudo is not required.
  4. Match advisories. Installed packages are checked against security advisories, including CISA KEV and EPSS intelligence when available.
  5. Review coverage. The result states which checks ran and which could not be checked. An unchecked area is never treated as clean.
ScanTitan Authenticated server assessment over SSH setup with a Server access selector
The setup for an authenticated server assessment. It shows the configuration, not a completed finding.

What it covers and what it does not

Authenticated scanning applies to Linux servers reachable on a public address.
  • Covered: authorized public individual server or IP assets running Linux, with package advisory matching and the public service checks described on the network vulnerability scanner page.
  • Not covered: Windows authenticated scanning, logins to routers, switches or firewalls, CIS or NIST benchmark certification, private network connectors and CIDR range scanning.
  • An advisory match shows that a package version is affected. It does not prove that the weakness is exploitable on your server.

To assess one public address without credentials, see the IP vulnerability scanner.

Credentials and access control

Use a dedicated account for the assessment and give it the least access that can read package information. Do not reuse an administrator account. Saved access is stored with encryption, and you can remove it when you no longer need it. See the security page for how ScanTitan handles customer data.

Plans for authenticated server assessment

Authenticated Linux checks are available with Business at $155 per asset place per year, and with Consultant at $486 per asset place per year for assessing client servers. Free and Professional do not include server assessment. One asset place holds one asset, and prices are billed annually.

Compare the plans on the pricing page, or see the Consultant plan if you assess servers for clients.

Authenticated server scanning questions

What is an authenticated Linux vulnerability scanner?

It logs in to a Linux server with authorized access and reads the installed packages to check them against security advisories, instead of relying only on what the server shows from outside. ScanTitan does this over SSH.

What access does the scanner need?

A dedicated account with read access. The scanner reads operating-system and package inventories using fixed commands, and sudo is not required.

Which plans include it?

Business and Consultant. Free and Professional do not include public server or authenticated Linux checks.

Does it scan Windows servers or network devices?

No. It covers Linux servers only. Windows authenticated scanning and logins to routers, switches or firewalls are not supported.

Can it scan private networks or ranges?

No. The self-service workflow supports authorized public individual server or IP assets. Private connectors and CIDR ranges are not part of the released scope.

Does an advisory match mean the server can be exploited?

No. It shows that an installed package version is affected by a published advisory. KEV and EPSS help you decide what to fix first, but they do not prove exploitation of your server.

Is this a CIS or NIST benchmark audit?

No. It is not a configuration benchmark or compliance certification.

Assess your Linux server

Choose Business with the IP / server asset type to add a public server and run an authenticated assessment. Agencies and consultants can use Consultant for client servers.

Assess my serverConsultant plan for client servers