Give it the software you found on a host (one per line, any formatting). It normalises each to a known product, version-range matches it against the CVE/CPE data, and returns the vulnerabilities ranked Act now, then Schedule, then Monitor. It never runs a scan and never takes a file - scanner output (nmap, etc.) is parsed upstream in the Voidmap dashboard, which calls this engine.