---
title: ToolRouter — Workflow
description: A multi-tool workflow showing how to combine ToolRouter tools for a complex task.
url: https://toolrouter.com/workflows/full-security-assessment
---
# Full Security Assessment

Comprehensive security assessment combining infrastructure probing, vulnerability scanning, penetration testing, and CVE intelligence.

A full security assessment provides end-to-end visibility into your application and infrastructure security posture. Starting with host discovery and service enumeration, the workflow progresses through automated vulnerability scanning and active penetration testing to uncover both known and novel security weaknesses.

Each finding is enriched with CVE intelligence including CVSS scores, exploit availability, and remediation guidance. This workflow is ideal for pre-launch security reviews, periodic security audits, and compliance assessments where thorough coverage is required.

**Tools:** pentest, security-httpx, security-nuclei, vulnerability-database
**Category:** security

## Steps

### 1. Probe Target Infrastructure

Discover live hosts, open ports, and running services across the target domain to map the attack surface.

- **Tool:** security-httpx
- **Skill:** probe_hosts
- **Input:** Target domain or list of subdomains to probe.
- **Output:** Live hosts with open ports, HTTP status codes, technologies detected, and TLS information.

### 2. Run Vulnerability Templates

Execute Nuclei vulnerability templates against discovered hosts to identify known security issues.

- **Tool:** security-nuclei
- **Skill:** scan_targets
- **Input:** List of live hosts from the probe step.
- **Output:** Matched vulnerabilities categorized by severity with CVE references and remediation guidance.

### 3. Deep Penetration Testing

Perform active penetration testing including injection, XSS, and authentication bypass attempts.

- **Tool:** pentest
- **Skill:** scan_vulnerabilities
- **Input:** Target URL and discovered endpoints from previous steps.
- **Output:** Exploitable vulnerabilities with proof-of-concept details and risk ratings.

### 4. Enrich with CVE Intelligence

Look up detailed CVE information for each discovered vulnerability to assess real-world impact and available patches.

- **Tool:** vulnerability-database
- **Skill:** cve_details
- **Input:** CVE identifiers from the scanning and pentest results.
- **Output:** Full CVE details including CVSS scores, affected products, exploit availability, and patch references.

## Benefits

- Complete attack surface mapping from infrastructure to application layer
- Automated detection of thousands of known vulnerability patterns
- Active penetration testing catches issues scanners miss
- CVE enrichment provides actionable remediation priorities
- Consolidated report suitable for compliance and stakeholder review
