https://securitythisday.com/when-is-one-vulnerability-scanner-not-enough/