Penetration Testing mailing list archives
Re: Vulnerability Assessment
From: jfvanmeter () comcast net
Date: Tue, 24 Jul 2007 08:31:31 +0000
My two shiny centvos --- I would use Nessus, its free, there is a port to Windows, you can write you own plugins, I've seen tenable fix fail postives in a day, if you want to pay for the plug in feed its only 1200 dollars US. if you pay for the plugin feed you can use the compliance checks, Tenable has pre configured checks you can download or you can write them yourself. check it out, www.nessus.org I'm not a employee of Tenable Security, I've tried all of the others... Foundscan, retina, ISS, Satan, Saint, etc and I still personnel like Nessus. -------------- Original message ---------------------- From: "Deepak Parashar" <deep231982 () gmail com>
Uzair, I would to say to go for Foundstone-I have worked on this solution for long and it's really good product for vuln. assessment if designed correctly and have good reporting feature as well, it'll give you options to drill down to dll versions and gives you liberty to create your own tests as well........... other best option would be Retina.... -DP http://www.linkedin.com/in/deepakparashar http://deepakparashar.blogspot.com/ "Vision is the art of seeing the invisible"...Jonathan Swift On 6/4/07, Uzair Hashmi <uzair () kse com pk> wrote:Hello list, I have been evaluating an automated vulnerability assessment software, havefound two of them better for the organizational needs. I need your help to select only one out of the two.1- QualysGuard (http://www.qualys.com) 2- Foundstone Enterprise(http://www.mcafee.com/us/enterprise/products/vulnerability_management/foundston e_enterprise.html)Please advice. Regards, Uzair ------------------------------------------------------------------------ This List Sponsored by: Cenzic Are you using SPI, Watchfire or WhiteHat? Consider getting clear vision with Cenzic See HOW Now with our 20/20 program! http://www.cenzic.com/c/2020 ------------------------------------------------------------------------------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- Re: Vulnerability Assessment Mondai Ji (Jul 23)
- <Possible follow-ups>
- Re: Vulnerability Assessment Colin Grady (Jul 23)
- Re: Vulnerability Assessment Danux (Jul 23)
- Re: Vulnerability Assessment Kish Pent (Jul 25)
- Re: Vulnerability Assessment Danux (Jul 23)
- Re: Vulnerability Assessment Deepak Parashar (Jul 23)
- Re: Vulnerability Assessment US Infosec (Jul 24)
- Re: Vulnerability Assessment jfvanmeter (Jul 24)
- Re: Vulnerability Assessment Pete Herzog (Jul 24)
- RE: Vulnerability Assessment Uzair Hashmi (Jul 25)
- Re: Vulnerability Assessment US Infosec (Jul 27)
- Re: Vulnerability Assessment Tima Soni (Jul 31)
- Re: Vulnerability Assessment Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] (Jul 31)
- Re: Vulnerability Assessment Pete Herzog (Jul 25)
- Re: Vulnerability Assessment Pete Herzog (Jul 25)