A program that automatically detects security weaknesses on remote or local hosts. A good scanner is worth the value of a thousand passwords.