> ## Documentation Index
> Fetch the complete documentation index at: https://docs.panguard.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# panguard scan

> Run security vulnerability scans on the local machine.

The `scan` command performs a comprehensive security assessment of your endpoint, checking for vulnerabilities, misconfigurations, outdated software, and known threats. Results are scored and prioritized by AI so you can focus on what matters most.

## Usage

```bash theme={null}
panguard scan [options]
```

## Options

<ParamField path="--quick" type="flag">
  Run a fast scan covering only critical checks.
</ParamField>

<ParamField path="--output" type="string">
  Write the scan results to the specified file path. Supports `.json`, `.html`, and `.pdf` formats
  based on file extension.
</ParamField>

<ParamField path="--lang" type="string" default="en">
  Set the output language for scan results (e.g., `en`, `zh-TW`, `ja`).
</ParamField>

<ParamField path="--verbose" type="flag">
  Show detailed output including individual check progress and debug information.
</ParamField>

## Examples

<CodeGroup>
  ```bash Quick Scan  theme={null}
  panguard scan --quick
  ```

  ```bash Full Scan with JSON output theme={null}
  panguard scan --output ./results/scan-report.json
  ```

  ```bash Full Scan in Traditional Chinese theme={null}
  panguard scan --lang zh-TW --verbose
  ```

  ```bash Export PDF Report theme={null}
  panguard scan --output ~/Desktop/security-audit.pdf
  ```
</CodeGroup>

## Scan Types

| Mode           | Checks                                                                  | Duration     |
| -------------- | ----------------------------------------------------------------------- | ------------ |
| `--quick`      | Critical vulnerabilities, open ports, root access                       | \~30 seconds |
| Full (default) | All scanners including CVE, CIS benchmarks, malware signatures, network | 2-5 minutes  |

## What Gets Scanned

* **System vulnerabilities** -- CVE database matching against installed packages
* **Configuration audit** -- CIS benchmark checks for OS hardening
* **Network exposure** -- Open ports, listening services, firewall rules
* **Malware detection** -- ATR rule matching and hash lookups
* **File integrity** -- Checks against known-good baselines
* **User accounts** -- Privilege escalation risks, weak credentials

## Related

<CardGroup cols={2}>
  <Card title="First Scan Guide" icon="book-open" href="/guides/first-scan">
    Step-by-step walkthrough of your first security scan.
  </Card>

  <Card title="Scanners Reference" icon="microscope" href="/products/scan/scanners">
    Detailed documentation for each scanner module.
  </Card>

  <Card title="Risk Scoring" icon="chart-bar" href="/products/scan/risk-scoring">
    How Panguard AI prioritizes and scores findings.
  </Card>

  <Card title="panguard report" icon="file-chart-column" href="/cli/report">
    Generate compliance reports from scan data.
  </Card>
</CardGroup>