Vulnerability Assessment (VA) is a systematic process of scanning, identifying, analyzing, and reporting security weaknesses in IT environments — including systems, networks, applications, and databases.