Abstract

Network Vulnerability Assessment is a must to ensure the security of today’s IT infrastructures, but many traditional scanners generate vast numbers of open-port and CVE lists indiscriminately across environments without proper pre-prioritization, exploitability intelligence or actionable remediation. We demonstrate a Network Vulnerability Scanner with AI-Integrated Threat Intelligence, a system that integrates automated reconnaissance and vulnerability enrichment with interpretable risk analysis. The contributed system conducts host discovery, multi-mode port scanning, service/version enumeration and OS fingerprinting, followed by mapping discovered services to Common Platform Enumeration (CPE) identifiers for fetching connected Common Vulnerabilities and Exposures (CVEs) as well as CVSS severity scores via the NIST NVD API 2.0. To bridge the gap between theoretical discovery and real-world threat applicability, identified vulnerabilities are matched with the CISA Known Exploited Vulnerabilities (KEV) listing, providing insight into actively exploited vulnerabilities. Moreover, a Gemini-powered AI module also creates executive summaries, threat narratives, attack scenario insights and prioritized remediation recommendations that help convert raw scan results into actionable intelligence for both technical analysts and decision makers. We also provide the system in both command-line and web dashboard modes, with real-time scan progress tracking as well as centralized records of history/scans/networks and automatic JSON/HTML/PDF export support. Our experimental results show an increased understanding of the attack surface and efficient triaging with respect to baseline scanning mechanisms, resulting in faster and better-informed remediation.