External vulnerability assessment