scrutinising vulnerabilities