I am looking for some open source tools to manage data from vulnerability scans. My company uses Tenable Nessus, Mcafee vulnerability mananger, acunetix, appscan for vulnerability scans. However it is extremely difficult to review output from multiple tools and generate VA report from it. Also it is very difficult to track closure of these VA findings.
Looking for some tools/methods to manager VA scan. recently I have come across tool called Openfisma but not sure whether I can use that in carporate but this tool can take xml output report from VA tools and generate report from it and helps in effectively tracking the same.
Can i go ahead and use Openfisma or is there any other tools available to consider for VA audit management?
Awaiting your reply..