Vulnerability Scanners
Discussion
Hi,
Could do with some advice on what people use for OS vulnerability scanners.
We use Linux servers and have to provide reports to ensure that the key OS vulnerabilities are scanned for and addressed as they come out.
I've built an OpenVAS vulnerability server which performs weekly scans of our servers, and it does provide impressive reports of vulnerabilities but it isn't the best or most reliable tool I've come across. It's GUI is atrocious and its difficult to change existing scan schedules.
I've trialed Qualys vulnerability scanner, but I can't get the cost of it signed off. Unfortunately I think it is significantly better than GreenBone OpenVAS, but opinion doesn't matter when one is Opensource and the other is a paid for solution.
Anyone else use any OS vulnerability scanning software ?
Thanks
Mark
Could do with some advice on what people use for OS vulnerability scanners.
We use Linux servers and have to provide reports to ensure that the key OS vulnerabilities are scanned for and addressed as they come out.
I've built an OpenVAS vulnerability server which performs weekly scans of our servers, and it does provide impressive reports of vulnerabilities but it isn't the best or most reliable tool I've come across. It's GUI is atrocious and its difficult to change existing scan schedules.
I've trialed Qualys vulnerability scanner, but I can't get the cost of it signed off. Unfortunately I think it is significantly better than GreenBone OpenVAS, but opinion doesn't matter when one is Opensource and the other is a paid for solution.
Anyone else use any OS vulnerability scanning software ?
Thanks
Mark
blackscooby said:
Hi,
Could do with some advice on what people use for OS vulnerability scanners.
We use Linux servers and have to provide reports to ensure that the key OS vulnerabilities are scanned for and addressed as they come out.
I've built an OpenVAS vulnerability server which performs weekly scans of our servers, and it does provide impressive reports of vulnerabilities but it isn't the best or most reliable tool I've come across. It's GUI is atrocious and its difficult to change existing scan schedules.
I've trialed Qualys vulnerability scanner, but I can't get the cost of it signed off. Unfortunately I think it is significantly better than GreenBone OpenVAS, but opinion doesn't matter when one is Opensource and the other is a paid for solution.
Anyone else use any OS vulnerability scanning software ?
Thanks
Mark
Are these Linux servers on-prem or Cloud (AWS, GCP etc.)?Could do with some advice on what people use for OS vulnerability scanners.
We use Linux servers and have to provide reports to ensure that the key OS vulnerabilities are scanned for and addressed as they come out.
I've built an OpenVAS vulnerability server which performs weekly scans of our servers, and it does provide impressive reports of vulnerabilities but it isn't the best or most reliable tool I've come across. It's GUI is atrocious and its difficult to change existing scan schedules.
I've trialed Qualys vulnerability scanner, but I can't get the cost of it signed off. Unfortunately I think it is significantly better than GreenBone OpenVAS, but opinion doesn't matter when one is Opensource and the other is a paid for solution.
Anyone else use any OS vulnerability scanning software ?
Thanks
Mark
Paid alternatives I'm somewhat aware of are Nessus and Outpost24.
Not sure of the difference in cost between it and Qualys though. I've got a fair bit of experience with Qualys, whilst it's useful in terms of the scanning it does (and the breadth, to an extent, of things it can scan) it is an absolutely horrible tool to use when you want to actually get information from it.
mholt1995 said:
Are these Linux servers on-prem or Cloud (AWS, GCP etc.)?
Paid alternatives I'm somewhat aware of are Nessus and Outpost24.
Not sure of the difference in cost between it and Qualys though. I've got a fair bit of experience with Qualys, whilst it's useful in terms of the scanning it does (and the breadth, to an extent, of things it can scan) it is an absolutely horrible tool to use when you want to actually get information from it.
All our servers are in house, scanning our servers used for development and deployment. Numerous flavours of Linux.Paid alternatives I'm somewhat aware of are Nessus and Outpost24.
Not sure of the difference in cost between it and Qualys though. I've got a fair bit of experience with Qualys, whilst it's useful in terms of the scanning it does (and the breadth, to an extent, of things it can scan) it is an absolutely horrible tool to use when you want to actually get information from it.
Greenbone certainly isn't a nice interface either.
Thanks
Mark
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff