If you do some casual research you’ll see a lot of companies claiming to provide vulnerability assessments. Read article