Scanning servers for compliance