JumpStart Threat Scanner

You can use the JumpStart Threat Scanner services to scan your public-facing IP addresses and domains for a targeted list of critical vulnerabilities.

Threat Scanner is available as a 30-day trial or a paid subscription service. The JumpStart Threat Scanner subscription service supports up to 1,000 domains, up to 1,000 IP addresses, automatic scans, and 10 daily on-demand scans. The JumpStart Threat Scanner trial offers full Threat Scanner functionality for the 30-day trial period.

First-time configuration

The first time a user in your organization opens the JumpStart Threat Scanner tile, they are prompted to enter the locations they wish to scan. You cannot run a scan until you have entered at least one IP address or domain. Locations are shared across users in an organization, so subsequent users won’t be prompted to enter additional locations. See Edit scan locations for more information about adding IP addresses and domains.

Run a scan

1. Sign in to the Cyber JumpStart Portal.

2. On the JumpStart Threat Scanner tile, click Open.

3. Click Run Scan. The Critical Vulnerabilities section displays a progress bar. When complete, the Critical Vulnerabilities section displays the scan results.

   Tip: When the scan is complete, you receive an email notification.

4. If Threat Scanner detects a vulnerability:

   1. Click to see more information about the detection.

   2. Click Get Help to contact a security expert.

   3. (Optional) Click View details to open a panel that contains the vulnerability history.

      Tip: Click Download History to download a CSV file of the vulnerability history.

Edit scan locations

1. Sign in to the Cyber JumpStart Portal.

2. On the JumpStart Threat Scanner tile, click Open.

3. Click Edit Locations.

   Tip: You can also select in the Scan Results section.

4. Add a domain:

   1. Click Add Domain.
   2. Click to confirm the domain.

5. Add an IP address:

   1. Click Add IP Address.
   2. Click to confirm the IP address.

6. To remove a domain or IP address, click for the entry.

View vulnerabilities

You can review the list of common vulnerabilities and exposures (CVEs) and common weakness enumeration (CWE) that Threat Scanner looks for. Threat actors are known to exploit these CVEs and CWEs.

1. Sign in to the Cyber JumpStart Portal.
2. On the JumpStart Threat Scanner tile, click Open.
3. In the Scanned Vulnerabilities section, click . The list of vulnerabilities expands.
4. To view a complete list, click View All.
5. To view details for a specific vulnerability, click .

Upgrade scan subscription

If you are using JumpStart Threat Scanner Lite, you can upgrade your subscription.

1. Sign in to the Cyber JumpStart Portal.
2. On the JumpStart Threat Scanner tile, click Upgrade.
3. Complete the payment process.