Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Nessus and OpenVAS appear to have fairly similar features. Why would you choose one over the other, besides the benefit of commercial support (which isn't available for Nessus Home Feed users anyways)?

share|improve this question
@Rory mentioned the GUI below, so additionally, pretend that I use the CLI version of each for the sake of argument ;> – atdre Nov 14 '10 at 23:38
up vote 9 down vote accepted

A recent test of Nessus and OpenVAS shows the benefits in using multiple scanners due to the difference in the signatures:
Nessus, OpenVAS and Nexpose VS Metasploitable (blog post by Peter at HackerTarget)

Out of 15 known security holes in the system used for the test, 4 were spotted by all four tested tools (Nessus, OpenVAS, Nexpose and some Nmap scripts); 7 were only spotted by some and 4 were missed completely.

Tenable responded with an article on The Right Way To Configure Nessus For Comparison.

share|improve this answer

I think that both projects will have their strong and weak points. At the moment I'd say that Nessus appears to have a wider range of plugins available and arguably a better user interface than the standard OpenVAS client/server implementation.

In addition Nessus seems to have widened their original focus in unauthenticated vulnerability scanning to include authenticated (audit) style checking. In several scenarios this is likely to produce more accurate results than unauthenticated scanning. Having looked at these scanners authenticated scanning capabilities, Nessus does seem more advanced here than OpenVAS

EDIT : Just thought I'd add another couple of things I've noticed which could be relevant to people looking to evaluate these two. If you're looking at Database Scanning (Oracle/SQL Server) Nessus offers credentialed scanning for these, with DB level creds, which will find some vulnerabilities.

That said if you're interested in database vuln scanning NeXpose could be well worth considering, it seems to have good authenticated and unauthenticated database scanning.

share|improve this answer
I was under the impression that OpenVAS had more plugins than Nessus, and that OpenVAS also included authn checking with SLAD -- – atdre Nov 14 '10 at 23:37
@dre Well I've not done a detailed look at coverage but going on the numbers on their pages mentions 18000 NVTs, for nessus there's mention of 40000 plugins here – Rоry McCune Nov 16 '10 at 12:15
We use Nessus, and have gotten a lot of milage out of the audit files. If you actually have configuration guidelines then being able to build your own audit files is a great help. – Scott Pack Dec 8 '10 at 14:55

From years of Nessus usage (against competitors such as Retina, OpenVAS etc) it is not perfect, but it is still better than the competition for coverage, and ease of translation into real-world results.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.