Programs that assess the vulnerability of systems by scanning them for known problems (such as accounts with no passwords).