Abstract: A storage appliance or system may support backup and recovery for virtual machines that support various applications. The storage appliance or system may process a backup snapshot of the virtual machine to identify security vulnerabilities in the virtual machine. The storage appliance may generate an index of software packages installed on the virtual machine and software versions of the software packages. The index of software packages may be compared to a list of security vulnerabilities to identify the security vulnerability at the virtual machine. A notification may be triggered, and the notification may indicate a result of comparing the index of software packages and the software versions to the list of vulnerabilities. In some examples, a set of network configurations implemented by the virtual machines may be determined by processing the backup snapshot and used to identify security vulnerabilities.