Vulnerability scans

The CRA requires manufacturers to conduct regular security tests on their products that contain digital components. A single penetration test at the time of delivery does not meet these requirements. Products regularly undergo functional enhancements or must adapt to a changing environment, such as new operating system versions. Any modification to the product or its operating environment can potentially introduce new security vulnerabilities.

In fast-paced markets such as the app industry, updates can be released on a weekly basis. It is not feasible to conduct a full manual security vulnerability assessment for every update. Automated vulnerability scanners are an ideal solution for testing your own software with the frequency required by the CRA. They automatically analyze applications for the most critical types of vulnerabilities.

With VUSC, Fraunhofer SIT offers such a fully automated, high-precision scanner. VUSC detects more than 400 different types of vulnerabilities, focusing on mobile apps (Android and iOS) as well as Java programs, including enterprise software (Java/Jakarta EE).

VUSC can be integrated into the development process or run as a minimally invasive additional step at the end on the final application. This provides your development team with maximum flexibility. Agile teams benefit from early feedback on all changes to the software, while complex or system-specific build processes can continue without changes.

We’d be happy to demonstrate VUSC on your applications. Feel free to contact our expert via email or give us a call.