A vulnerability scanner will scan an application or network for known vulnerabilities. These applications can be hosted on a local or remote server, and most of them use a client-server model with one scanning an external server and the other full of internal scanning modules to test a server based on its configuration and software components.