One-Time External Vulnerability Scanning

Backed by over 20 years of cybersecurity experience, Clone Systems offers enterprise-grade vulnerability scanning powered by our proprietary scanning engine, trusted by financial institutions and backed by our PCI Approved Scanning Vendor credentials. Get a professional external security assessment without an annual commitment. Ideal for startups, new website launches, cyber insurance reviews, and compliance preparation.

60 days
Scanning access
5 reports
Professional security reports
Agentless
No software installation
Upgrade credit
What you paid toward annual scanning

What is a one-time external vulnerability scan?

A one-time external vulnerability scan is a single, point-in-time security assessment of your internet-facing IP addresses or websites, bought once with no annual subscription. Clone Systems scans your public targets from outside your network, shows you what an attacker could find, and gives you 60 days to fix the findings and rescan until your assessment passes.

When a one-time scan is the right fit

Startups and new website launches

Check a new site or app before customers and investors do.

Cyber insurance applications and renewals

Insurers commonly ask about vulnerability scanning. Requirements vary by insurer, so confirm what yours accepts.

Cyber Essentials Plus preparation

Find and fix external issues before your assessment.

Customer security assessments

Have current scan reports ready when a customer or partner asks for evidence.

Compliance preparation

Support readiness work for CMMC, NIST, SOC 2 and ISO 27001.

After a major change

Verify a new server, migration or release with a fresh external scan.

What the scan checks

Network and operating system vulnerability tests

Malware detection

GDPR, SOX, HIPAA, NIST and SCADA-related vulnerability checks

Agentless scanning with no software to install

Five professional security reports

PDF

Vulnerability Assessment Report

Every finding across your scanned hosts with its CVSS v3 score, known exploited vulnerability (KEV) status, the fix and references, plus an asset table.

PDF

Executive VRMS Report

A management summary of the scan: risk rating, trend, top risks, KEV exposure and remediation priorities.

PDF

Vulnerability Summary Report

The findings condensed by host and severity, without the technical detail.

Excel

Remediation Workbook

A workbook for delegating and tracking fixes across your team.

PDF

Scan Comparison Report

What changed since the previous run of your scan: new, recurred, fixed and still-open findings, with the trend.

One-time packages

Choose your external scanning scope.

Starter

1 Public IP or URL
$99 / 60 days
One-time purchase

An affordable external vulnerability assessment for startups, newly launched websites, and small businesses looking to identify security risks.

  • 1 Public IP or URL
  • 60-day access with remediation rescans
  • 5 professional security reports
  • Vulnerability Security Seal upon passing
Recommended

Standard

10 Public IPs or URLs
$395 / 60 days
One-time purchase

Professional external vulnerability scanning for businesses preparing for Cyber Essentials Plus, cyber insurance reviews, customer security assessments, or compliance requirements.

  • 10 Public IPs or URLs
  • 60-day access with remediation rescans
  • 5 professional security reports
  • Vulnerability Security Seal upon passing

Advanced

100 Public IPs or URLs
$1,995 / 60 days
One-time purchase

Enterprise-grade external vulnerability scanning for larger environments supporting CMMC, NIST, SOC 2, ISO 27001, and organization-wide security assessments.

  • 100 Public IPs or URLs
  • 60-day access with remediation rescans
  • 5 professional security reports
  • Vulnerability Security Seal upon passing

Scan. Fix. Verify.

01

Scan

Run your initial external vulnerability scan.

02

Fix

Review your findings and remediate.

03

Verify

Perform unlimited remediation rescans at no additional cost until your assessment passes or your 60-day access expires.

Your portal access is ready right after checkout.

One-time scan or annual scanning?

One-time scanAnnual scanning
Access60 days12 months
Package sizes1, 10 or 100 public IPs or URLs10, 50 or 150 public IPs or URLs
Scanningone initial scan per target plus unlimited remediation rescans until passingscan on your own schedule all year, we recommend monthly
Best fora point-in-time assessmentongoing visibility as your environment changes
Billingone-time purchase, no renewalannual
Upgrade100% of your purchase credited toward annual within 60 daysnot applicable

See annual External Vulnerability Scanning

Start with 60 Days. Upgrade When You're Ready.

Apply 100% of your purchase toward an annual External Vulnerability Scanning package when you upgrade within your 60-day license period.

Clone Systems
7
CL
Security Overview

Your posture, what changed, and what to do next.

Security Posture
B+
342 open findings
High8
Medium47
Compliance
Passing
PCI DSS 4.0.1 ready
Passed 90d128
Failed 90d6
What's New
+23
since last scan
New KEVs 7d3
Scans 30d42
Next Scan
Tomorrow
weekly · 02:00 UTC
Running2
IPs1,284
Risk Over Time
-38% · 90 days
90450
JFMAMJJASOND
Clone Guard® Security Scanning  |  © 1998–2026 Clone Systems, Inc. All rights reserved

Vulnerability Security Seal upon passing

When your assessment passes, you can display a Clone Systems security seal on your website.

See how the trust seal works

Need PCI compliance scanning instead?

A one-time vulnerability scan is not a PCI ASV scan. PCI DSS requires passing external scans from an Approved Scanning Vendor every quarter. If you accept card payments, see PCI Compliance Scanning.

Related services

PCI Compliance Scanning

Quarterly external ASV scans and attestation reports.

Learn more about PCI Compliance Scanning

Vulnerability Assessment

Internal and external assessments for ongoing visibility.

Learn more about Vulnerability Assessment

Automated Penetration Testing

Test whether known weaknesses can be exploited.

Learn more about Automated Penetration Testing

Need More Than 100 IPs?

Contact our team for custom external vulnerability scanning packages tailored to your environment.

Ready when you are

Scope your external vulnerability assessment.

Tell our team about your environment and what you want assessed.

TALK TO OUR SCANNING TEAM

Scope your vulnerability assessment

Tell us about your environment and what you want assessed. A senior specialist will get back to you. All fields required except phone.

No spam, ever.

One-time scanning FAQ

One-time vulnerability scan questions, answered.

How does the annual upgrade credit work?

Your credit equals the amount you actually paid for your one-time package after any discount. Starter credit works on any annual External Vulnerability Scanning tier, Standard credit on Standard or Advanced, and Advanced credit on Advanced only. It is single use, tied to your account and valid during your 60-day license period. At website checkout choose Renewal, enter your portal username and enter the code.

How long does access last?

Your access lasts 60 days after payment. Run your initial external scan and perform unlimited remediation rescans until passing within that period. Access and the upgrade credit expire on the same date.

What is included in every package?

Each package includes agentless external vulnerability scanning, 60-day access with remediation rescans, five professional security reports, the advanced reporting and remediation module, standard portal user access and a Vulnerability Security Seal upon passing.

Is this an annual subscription?

No. It is a one-time purchase with no annual subscription. You can choose an annual External Vulnerability Scanning package later and apply your eligible upgrade credit before it expires.

How many targets can I scan?

Starter covers 1 Public IP or URL, Standard covers 10, and Advanced covers 100. Standard and Advanced include one initial external scan per licensed target. Contact Sales for more than 100 IPs.

What portal access is included?

All three one-time packages include standard portal user access.

How much does a one-time vulnerability scan cost?

Starter is $99 for 1 public IP or URL, Standard is $395 for 10, and Advanced is $1,995 for 100. Each is a one-time purchase with 60 days of access.

Can I buy a vulnerability scan without a subscription?

Yes. This is a one-time purchase with no annual subscription and no renewal.

How quickly can I start scanning?

Your portal access is ready right after checkout. Add your targets and run your first scan.

Do I need to install anything?

No. The scan is agentless and runs from outside your network.

What reports do I get?

Five: a Vulnerability Assessment Report, an Executive VRMS Report, a Vulnerability Summary Report, a Remediation Workbook in Excel, and a Scan Comparison Report.

Is a one-time scan accepted for cyber insurance?

Many insurers ask about vulnerability scanning on applications and renewals. Requirements vary by insurer, so check what yours requires. Your reports give you documented results to share.

Does this count as a PCI ASV scan?

No. PCI DSS requires quarterly external scans from an Approved Scanning Vendor. See PCI Compliance Scanning.

What is the difference between a vulnerability scan and a penetration test?

A vulnerability scan finds known weaknesses across your targets. A penetration test goes further and attempts to exploit them. Penetration testing vs vulnerability scanning

What happens after 60 days?

Your access ends. You can upgrade to annual External Vulnerability Scanning during the 60 days and apply your purchase as credit.

Is help available if I have questions about my results?

Yes. Support is available 24/7 by email and phone, and each finding in your Vulnerability Assessment Report includes the fix and references.