Docs / StarVault guide / Traditional Rule-Based Vault Health Scanners
Traditional Rule-Based Vault Health Scanners
- Comprehensive Audit: Calculates an overall vault health score (0–100) and security grade (A through F).
- Vulnerability Scanners:
- Reused / duplicate passwords across servers and services.
- Weak passwords with low entropy (< 40 bits) or short length (< 12 chars).
- Accidental duplicate names (fuzzy name matching).
- Stale credentials unrotated for > 180 or 365 days.
- Expiring TLS certificates, API tokens, and licenses.
- One-Click Remediation: Click "Review" on any finding to jump directly to the credential inspector.
Updated 2026-10-31