Nessus (software)

From Wikipedia, the free encyclopedia
Jump to navigation Jump to search
Nessus Vulnerability Scanner
Nessus-Professional-FullColor-RGB.svg
Developer(s)Tenable, Inc.
Stable release
8.3.1 / March 29, 2019 (2019-03-29)[1]
RepositoryNone available
Operating systemCross-platform
PlatformMac, Windows, Linux
TypeVulnerability scanner
LicenseProprietary; GPL (2.2.11 and earlier)
Website[1]

Nessus is a proprietary vulnerability scanner developed by Tenable, Inc. (NASDAQ: TENB)

Operation[edit]

Examples of vulnerabilities and exposures Nessus can scan for include:

Nessus scans cover a wide range of technologies including operating systems, network devices, hypervisors, databases, web servers, and critical infrastructure.

The results of the scan can be reported in various formats, such as plain text, XML, HTML and LaTeX. The results can also be saved in a knowledge base for debugging. On UNIX, scanning can be automated through the use of a command-line client. There exist many different commercial, free and open source tools for both UNIX and Windows to manage individual or distributed Nessus scanners.

Nessus provides additional functionality beyond testing for known network vulnerabilities. For instance, it can use Windows credentials to examine patch levels on computers running the Windows operating system. Nessus can also support configuration and compliance audits, SCADA audits, and PCI compliance.

History[edit]

The Nessus Project was started by Renaud Deraison in 1998 to provide to the Internet community with a free remote security scanner.[2] On October 5, 2005, Tenable Network Security, the company Renaud Deraison co-founded, changed Nessus 3 to a proprietary (closed source) license.[3]

The Nessus 2 engine and a minority of the plugins are still GPL, leading to forked open source projects based on Nessus like OpenVAS and Porz-Wahn.[2][4]

Today, the product still exists in two formats; a limited, free version and a full-feature paid subscription option. Nessus is available for Linux, Windows, and Mac OS X. Tenable, Inc. went public on July 26, 2018, twenty years after Nessus’ creation.

See also[edit]

References[edit]

  1. ^ "Nessus Release Notes". Tenable Network Security. Retrieved 2018-08-10.
  2. ^ a b Carey, Mark; Russ Rogers; Paul Criscuolo; Mike Petruzzi. Nessus Network Auditing. O'reilly. ISBN 978-1-59749-208-9.
  3. ^ Olenick, Doug (2019-03-09). "SC 30th Anniversary Awards". SC Media.
  4. ^ "OpenVAS". Retrieved 2009-10-21.

External links[edit]