English | Deutsch
Home »

Project News

See our News Archive for a complete list of OpenVAS project news.

May 10th, 2012 - OpenVAS-5 released: New Asset-Management, Delta-Reports and embedded SCAP-Data

One year after OpenVAS-4 the fifth version of the tool for vulnerability scanning and management offers several new features. At the same time the number of freely available vulnerability checks has increased to over 25,000.

A very practical extension is the possibility to show the differences between two scan reports and the direct availability of current CPE and CVE information inside the OpenVAS database. This saves time for users who are finding out about changes and security recommendations. The new asset management adds a second view on scan results. It allows the user to review scan results for any selection of IP devices in the network.

All in all 20 new features were added, especially focusing on simplifying daily use. The systemtic improvements underline the position of OpenVAS as the most advanced Open Source solution for vulnerability management. The new version can be downloaded free and is available as Free Software under the GNU GPL license.

The company Greenbone Networks develops and uses OpenVAS as a basis for its appliance product family for vulnerability scanning and management. Together with the companies SecPod, SecuritySpace and the wider community new vulnerability tests and feature improvements are developed on a daily basis. The German Federal Office for Information Security (BSI) supports OpenVAS and uses it, together with many other federal agencies, for their IT security framework.

OpenVAS-5 can be experienced live at the Linuxtag Conference and Exhibition in Berlin (Germany) from 23rd to 26th of May 2012 at the BSI booth.

Read the full announcement

January 5th, 2012 - OpenVAS-5 BETA-Test phase started

The OpenVAS developers are proud to announce that the test phase for the upcoming OpenVAS-5 started and the first releases have become available.

OpenVAS-5 is yet another major evolution step of the Open Vulnerability Assessment System. Advances range from integration of CVE and CPE databse, an Asset Management over vulnerability prognosis, a improved user interface and not at least improved scanning and detection capabilities.

The OpenVAS-5-based Greenbone Security Manager recently passed the SCAP validation of US agency NIST for category Unauthenticated Scanner. All required criteria were added to OpenVAS-5.

A few features are still in the works and will be added over the next couple of weeks during the Beta phase. Together with improvements based on user feedback.

It is planned to close beta phase in february, entering the release candidate phase. The aim is to release OpenVAS-5 in march, exactly one year after the release of OpenVAS-4.

... Read the full announcement

March 17th, 2011 - OpenVAS-4 released

The OpenVAS community is proud to announce the availability of OpenVAS-4, the next generation of the Open Vulnerability Assessment System. Though only eight months since OpenVAS 3.1, the new release represents the biggest step forward ever in the history of OpenVAS.

The most significant new features are a Report Format Plugin Framework, a Master-Slave mode and an improved Scanner. The extended OpenVAS Management Protocol (OMP) 2.0 of OpenVAS Manager makes several new features consistently available to all of its clients (Web, Desktop, CLI).

This is the first release that is directly accompanied with installation packages for over 20 platforms, several installation quick guides, a tool to check proper setup and, last but not least a virtual appliance.

OpenVAS-4 covers the following OpenVAS modules: Libraries 4.0, Scanner 3.2, Manager 2.0, Administrator 1.1, GSA 2.0, GSD 1.1 and CLI 1.1.

At the OpenVAS developer conference #3, July 7-9 in Osnabrück, Germany, the feature set for OpenVAS-5 will take shape.

Read the full announcement