A method and a system for determining vulnerabilities on a network are provided. The method comprises: receiving data indicative of a first network architecture element; determining, based on the data, a respective one of a plurality of predetermined task templates, the respective one of the plurality of predetermined task templates including one or more tasks for identifying respective vulnerabilities associated with the first network architecture element; in response to identifying, based on the respective one of the plurality of predetermined task templates, at least one vulnerability associated with the first network architecture element, the at least one vulnerability providing access to a second network architecture element associated with the first network architecture element: determining data indicative of the second network architecture element; and using the data indicative of the second network architecture element for identifying further vulnerabilities on the network.