Copla Managed Vulnerability Scanning is a fully managed security scanning service that identifies misconfigurations and known vulnerabilities across cloud environments. The service is operated by Copla's security team, who handle tooling, execution, and result interpretation on behalf of the customer. Scanning coverage includes: - Cloud Security Posture Management (CSPM) for AWS (IAM, S3, EC2) - Static Application Security Testing (SAST) - Dynamic Application Security Testing (DAST) - External attack surface checks - Dark web and credential leak monitoring - Phishing simulation to assess human risk Findings are delivered as either raw tool outputs or tailored reports with control mappings aligned to ISO 27001, DORA, NIS2, and SOC 2 frameworks. Each report includes a timestamped audit trail and remediation notes intended for use as audit evidence. The service is available as a one-time engagement or on a recurring quarterly basis. Scoping, access definition, and target identification are handled by the customer; Copla manages all remaining execution and reporting. Outputs integrate with CyberUpgrade's evidence engine and compliance workflows, enabling centralized tracking of findings and remediation. The service operates on an 80/20 model, where Copla's team and automation handle approximately 80% of the workload. Penetration testing is not included but is available as a separate, complementary service.