The subject of the project is the acquisition and implementation of special SW and HW, which will enable automated identification, categorisation and evaluation of the vulnerabilities of important IS and IS critical information infrastructure. The tool/solving covers the following activities:- Identification/monitoring IT assets,- Asset categorisation into groups,- scanning of assets to known vulnerabilities,- risk classification according to severity,- Patch management,- Patch testing,- patch application,- Follow-up scanning after patch application.