vulnerability surveys