SYSTEM, METHOD, AND COMPUTER PROGRAM FOR PROVIDING A VULNERABILITY ASSESSMENT OF A NETWORK OF INDUSTRIAL AUTOMATION DEVICES

A system, method, and computer program are provided for providing a vulnerability assessment of a network of industrial automation devices. A user interface that enables a user to select an IP address range and a plurality of industrial automation protocols is provided. The system attempts to establish a communication session with each device within the selected IP address range using each of the selected industrial automation protocols. If a communication session is established with a device, the system attempts to read device information. If device information can be read, the system determines a threat level associated with the device using the device information. The system then provides a vulnerability assessment to the user, identifying each device with which a communication session was established and the industrial automation protocol(s) with which the communication session was established and any threat level determined for the device.