WorkNest Secure adds continuous vulnerability scanning

WorkNest Secure has added continuous vulnerability scanning to its GuardNest platform, expanding the offering beyond periodic penetration testing.

The new function gives users ongoing visibility of vulnerabilities across internet-facing systems, web applications and internal environments. It also adds remediation workflows, allowing teams to set targets based on severity, assign actions internally and track progress through to resolution.

GuardNest now supports external vulnerability scanning, web application scanning, internal vulnerability scanning and agent-based internal scanning. Users can schedule scans, monitor vulnerabilities in real time and review activity through a single dashboard.

The addition is aimed at organisations that need regular oversight of security weaknesses between formal penetration testing exercises. Customers, insurers and regulators are also placing greater emphasis on ongoing vulnerability management rather than annual reviews alone.

Shift in approach

The launch reflects a broader change in cyber security spending, with more businesses seeking ongoing support instead of one-off projects. It also gives organisations that are not ready for a full penetration testing programme a standalone route into continuous vulnerability scanning through GuardNest.

The platform includes live dashboards, historical trend reporting and automated reporting. These records can support audit work, cyber insurance renewals, customer due diligence and compliance activity linked to standards including ISO 27001, Cyber Essentials Plus and PCI DSS.

WorkNest Secure pairs automated scanning with expert input to help customers prioritise issues by severity and business impact. The aim is to help security and IT teams focus remediation work on the most urgent vulnerabilities.

GuardNest was redesigned in 2025 as a platform for vulnerability management, penetration testing and remediation workflows. The latest changes build on that update and are being offered both as a standalone service and as an addition to existing GuardNest packages.

WorkNest Secure is the cyber security and compliance arm of WorkNest Group. The division was formed through the combination of Pentest People and Bulletproof in 2025 and provides services including penetration testing, vulnerability management, compliance support and round-the-clock security monitoring.

Kirsty Fowler, Managing Director of WorkNest Secure, said: "Cyber threats do not operate to an annual schedule, yet many organisations are still relying on point-in-time assessments to understand their security posture. New vulnerabilities emerge every day and infrastructure changes constantly, so businesses need visibility of their risks as they exist today, not six months ago. The new functionality was built to provide that continuous visibility while removing much of the complexity that often surrounds vulnerability management. By combining automated scanning with expert support and practical remediation guidance, we help organisations cut through the noise, understand what matters most and know exactly where action is needed. We understand that organisations are looking for a security partner, not just another dashboard or report, and that is exactly what the new functionality within GuardNest is designed to give them."