Yes. We use OpenVAS, a full-featured vulnerability scanner, to perform daily scans of all our systems and applications. All found CVEs are being patched promptly.