
OpenVAS
7.1#4 in vulnerability scanning softwareFrom €210.33 a monthFree planWebAPILinuxmacOS
Visit
| Fact | OpenVAS | Tripwire IP360 |
|---|---|---|
| Deployment | OPENVAS SCAN is available as hardware or virtual appliances and can run entirely within the customer's environment. | The on-premises solution uses hardened Linux-based virtual or physical appliances, and scanning appliances can be pooled. |
| Founded | 2008 | 1997 |
| Integrations | OPENVAS SCAN lists integrations with ServiceNow, Splunk, Nagios, Sourcefire, and CyberArk. | The vendor lists ServiceNow, Splunk Enterprise, LinkShadow, and RedSeal as example integrations and says IP360 uses open standards. |
| Purpose | OPENVAS is a vulnerability scanner for detecting weaknesses in IT systems. | Tripwire IP360 provides vulnerability management by discovering and profiling network assets and assessing their vulnerability risk. |
| Scanning | It supports authenticated and unauthenticated testing across internet and industrial protocols, with performance tuning for large scans. | Its application-centric fingerprinting runs relevant signatures for device and application types to limit unnecessary interactions. |
| Security | OPENVAS FREE uses a self-signed TLS certificate that browsers treat as insecure and require adding as an exception. | The management console uses a locked-down Linux operating system, strong encryption for communications, and frequent system, security, and vulnerability signature updates. |
| Support | OPENVAS FREE has no default enterprise support; product questions are handled voluntarily through the Greenbone Community Portal. | Tripwire support offers a customer portal for knowledge base, product videos, documentation, and creation and management of support cases. |
OPENVAS FREE is intended for private use and non-professional IT infrastructures. Organizations seeking commercial scanning within their environment can consider OPENVAS SCAN, which covers a range of systems and endpoints.
IP360 is aimed at organizations managing vulnerabilities across on-premises, cloud, or container assets. It may suit teams that need role-based administration, APIs, or appliance-based deployment.