model vulnerability scanning