Re: Distributed Vulnerability Scanners

In the past, I have used VIGILANTe SecureScan. They are a subscription based vulnerability assessment service. For an annual fee, you can execute scans as often as once per day. Their reports are quite detailed (i.e. whois lookups, findings, severity levels, w/corresponding advisories/fix actions). From what recall, they are based on ISS, Nmap, a few other hacking tools, and home grown scripts. In addition to their service, they offer software too. I'm probably not doing them justice, if you are interested, please refer to their site (http://www.vigilante.com).

If you have any questions or comments, please do not hesitate to contact me. Thank you.

Gideon

Gideon Rasmussen, CISSP
Celebration, FL
gideon@infostruct.net
321-939-1526

Greg Reber wrote:
>
> Andy - check out Qualys (www.Qualys.com ) and nCircle (www.ncircle.com)

Are your vulnerability scans producing just another report? Manage the entire remediation process with StillSecure VAM's Vulnerability Repair Workflow.
Download a free 15-day trial:
http://www2.stillsecure.com/download/sf_vuln_list.html Received on Thu Mar 6 17:53:58 2003