Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I'm looking for an open source vulnerability scanner that I could install on one of my machines and point to all my others. Ideally, I'd be able to configure a nightly scan where all of my other nodes are scanned and a composite report for each of them is served up.

I've been looking into OpenVAS and it looks like it might do exactly what I need. Has anybody ever used this before? Does anybody have any other recommendations? I'm only skeptical because the User Manual is virtually non-existent and I'd hate to invest a whole of time downloading and installing a software whose project is more or less extinct. Thanks for any feedback/suggestions!

share|improve this question
    
What is your use case here? Are you looking for something to use in your home for scanning your personal systems, or do you plan on using it professionally? –  Scott Pack Jul 2 '12 at 20:29
add comment

3 Answers

up vote 4 down vote accepted

Nessus and Nexpose are not open sourced. They do have free community versions though.

I have tried using OpenVAS, but i simply could not get it to work on my Backtrack installation. It is an active project though, which has regular updates.

share|improve this answer
1  
Be careful with the licensing on the HomeFeed. It has both technical limitations (only able to scan a dozen clients per scan, no configuration audits, etc.) and also has use restrictions. –  Scott Pack Jul 2 '12 at 20:28
add comment

I am co-founder of Orvant, our Securus service allows you to scan with both open source and propriatary security tools.

Our tool set includes Nmap, OpenVAS, Nikto and W3aF on the open source side of things. We make sure all the tools are configured correctly and kept up to date. We also manage and correlate the results of all the tools.

Using our sensors you can scan your network remotely or internally. We have a free account that should serve the needs of most small shops but our pricing is also very reasonable. www.orvant.com

share|improve this answer
    
Looks interesting, but more likely to get upvotes and visibility here if you provide a summary in your answer - this helps protect from link rot. –  Rory Alsop Jan 11 '13 at 17:10
    
Thanks Rory, I added a bit more to the description. –  Daniel Wozniak Jan 11 '13 at 19:11
add comment

Tenable nessus would be my recommendation. It's reasonably well documented and there's a large support community. The vulnerability db is a week behind in the free version but that's not a disaster.

share|improve this answer
2  
Nessus is not open source. 2.2.11 was its last open source release. –  chao-mu Jul 2 '12 at 14:31
    
Tenable removed the week lag on the free feed a few years ago. –  Scott Pack Jul 2 '12 at 20:26
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.