How can I find security vulnerabilities in my IT infrastructure?

There are two ways to find security vulnerabilities: through manual security audits or penetration tests – or through automated tools that systematically and regularly scan your IT for known weaknesses.

Proven methods for vulnerability discovery:

• External scans from a hacker’s perspective (open ports, SSL/TLS, DNS, e-mail security)
• Matching your software versions against CVE databases for known vulnerabilities
• Reviewing the configuration of web servers and mail servers
• Identifying outdated or forgotten systems (shadow IT)

The key distinction is between the internal and external perspective: internal audits check your systems from within – external scans show exactly what attackers see from the outside, the doors hackers actually use to break in. More than 70% of all cyberattacks start from the outside, which is why the external view matters so much.

CheckFix automates this external vulnerability discovery: within 24 hours, you receive a complete overview of all identified security vulnerabilities – including a prioritized to-do list with actionable remediation guidance that your own technician can implement.

What exactly does CheckFix check?

CheckFix analyzes your entire external attack surface: domains, subdomains, email servers, open ports, SSL certificates, DNS configuration, web technologies, and mail security (SPF, DKIM, DMARC).

Specifically, CheckFix checks:

• Your email addresses for faulty configurations
• Known vulnerabilities (CVEs) in recognizable technologies
• Open ports and outdated SSL/TLS protocols
• DNS and mail security settings

Everything accessible from outside via your domain(s) is checked – exactly as hackers would use automated tools.

Important: CheckFix is not a virus protection replacement, but complements your existing security measures with an external perspective. Zero-day vulnerabilities (unknown security gaps) cannot be detected by any tool – CheckFix finds known vulnerabilities (n-day) before attackers exploit them.

Who is CheckFix suitable for?

CheckFix is suitable for any company with an online presence: website, email server, cloud services, or APIs. Particularly benefiting are SMEs (professional IT security without 5-figure pentest budgets), NIS-2 obligated companies (technical compliance support and supplier verification), CRA-affected manufacturers (prove product security), and IT service providers/MSPs (customer verification and inventory monitoring).

Can my technician fix the vulnerabilities themselves?

Yes! CheckFix was developed exactly for this purpose. Each vulnerability is explained with step-by-step instructions – understandable for any competent technician. So whoever set up your IT now also fixes the security gaps. Additionally, an AI assistant supports implementation for your specific environment (Plesk, cPanel, Azure, AWS, etc.). A system administrator doesn’t replace a cybersecurity expert – but CheckFix translates security knowledge so your technician can implement it without 5-figure consulting costs.

What’s the difference between CheckFix and virus protection?

Virus protection (antivirus) protects your devices from inside against malware. CheckFix analyzes your company from outside – like a hacker. Both approaches complement each other: Antivirus defends against attacks that are already in the system. CheckFix prevents attackers from getting in at all by finding open doors (ports, misconfigurations, outdated software) before you get hacked. Optimal: Use both!

How often should I perform CheckFix?

Best practice is twice yearly. Why? New vulnerabilities arise continuously (software updates, new subdomains, configuration changes). After each check, your team needs time to fix – the re-check shows measurable progress. Semi-annual checks correspond to common compliance cycles (ISO 27001, NIS-2) and keep you secure between pentests. This makes security a routine instead of a mandatory exercise.