checking for vulnerabilities?