Host Vulnerability Assessment Checklist
Use this checklist to systematically assess and document security vulnerabilities on a host or system.
Host/System Information
Provide basic details about the host being assessed.
Host Name or IP Address
*
Operating System
*
Please Select
Windows
Linux/Unix
macOS
Other
Assessment Date
*
 -
Month
 -
Day
Year
2 digit month, 2 digit day, 4 digit year
Date
Assessor Name
*
First Name
Last Name
Contact Email
example@example.com
Vulnerability Assessment Areas
Evaluate the following areas for potential vulnerabilities.
Patch Management Status
*
Up to date
Some updates missing
Not updated
Open Ports and Services Review
*
Rows
Status
Unnecessary ports closed
1
Only required services running
2
Remote management ports secured
3
Antivirus/Antimalware Protection
*
Installed and up to date
Installed but outdated
Not installed
Firewall Configuration
*
Enabled and properly configured
Enabled but misconfigured
Disabled
Password Policy Compliance
*
Rows
Compliant?
Minimum password length enforced
4
Password complexity required
5
Regular password changes enforced
6
User Accounts Review
No unused accounts
No default/admin accounts
All accounts documented
Other
Security Logging and Monitoring
*
Enabled and reviewed regularly
Enabled but not reviewed
Not enabled
Overall Risk Rating for This Host
*
1
2
3
4
5
Additional Comments or Findings
Submit Assessment
Should be Empty: