vulnerabilityAssessmentProvider