About OpenVAS
OpenVAS stands for Open Vulnerability Assessment System and is a network security scanner with associated tools like a graphical user front-end. The core component is a server with a set of network vulnerability tests (NVTs) to detect security problems in remote systems and applications.
OpenVAS products are Free Software under GNU GPL.
Status: (as of December 18th, 2009)
- The OpenVAS NVT Feed service offers more than 15,500 signed scripts.
- OpenVAS 3.0.0 has been released on December 18th, 2009.
See also the Roadmap for upcoming changes and events.
Do you want to be the first to know about important OpenVAS developments? Consider subscribing to the OpenVAS-Announcement mailing list.
Project News
December 18th, 2009 - Network Security Scanner OpenVAS 3.0.0 Released
On December 18th, 2009, the OpenVAS developer team released OpenVAS 3.0.0. The release introduces new features and a new architecture which forms the basis for turning the vulnerability scanner into a vulnerability management solution.
The GPL-licensed Open Vulnerability Assessment System (OpenVAS) has become the Open Source Network Vulnerability Scanner. It is complemented with the largest open collection of vulnerability tests, the daily updated OpenVAS NVT Feed with over 15,500 Network Vulnerability Tests (NVTs).
Exactly 1 year after version 2.0.0 was released, the new 3.0 generation introduces:
- A new internal architecture of the modules
- NVT Meta Information that is free of arbitrary size limits
- IPv6 support
- WMI clients support
- Supports upcoming optional extensions:
- OpenVAS Manager for storing and organizing scans on a central server in a SQL database
- OpenVAS Administrator for User-, Feed- and Settings-Management
- Greenbone Security Assistent for a web-based Vulnerability Management
Compatibility:
The new OpenVAS Scanner remains compatible with the OpenVAS NVT Feed as well as
with the Greenbone Security Feed. Also, it is possible to use the new OpenVAS
Scanner with the OpenVAS-Client 2.0.
OpenVAS Client 3.0 can connect to both OpenVAS Scanner 3.0 and OpenVAS Server
2.0 concurrently, and even to OpenVAS Manager via the new OpenVAS Management
Protocol (OMP).
New Module Architecture:
OpenVAS 3.0 introduces a new architecture where openvas-libraries now includes
openvas-libnasl as well as redundant code from openvas-client. The module
openvas-server has been renamed to openvas-scanner and includes any
platform-dependent elements of openvas-plugins. As a result of this, the total
number of source code lines decreased, though new features were added. Also,
for running just the core scanner only 2 modules are required (instead of 4 as
is the case for OpenVAS 2.0).
Maintenance:
Version 3.0 will be maintained by the OpenVAS team for at least 2 years and the
maintenance of Version 2.0 will continue for at least one year. Version 1.0 is
being retired in January 2010.
Downloads:
All download links for OpenVAS 3.0.0 and additional information can be found on
the OpenVAS website. OpenVAS 3.0.0 has been released initially as a source code
package; binary packages for various distributions are expected to follow.
The OpenVAS team would like to thank everybody who has contributed to this release. We have worked hard to bring you a reliable network security scanner. If you have any questions or suggestions, please feel free to use the public mailing list and our online chat. Please use the OpenVAS bug tracker to report bugs.
The OpenVAS developers would like to wish all users a recreative holiday season and a happy new year.
August 10th, 2009 - The second OpenVAS Developer Conference and Workshop was a success
The second OpenVAS Developer Conference was held in Osnabrück from July 9th to July 12th. A workshop preceded it on July 8th.
With 16 participants from 4 continents we had lots of fruitful discussions, fun
and even did an important bug fix!
See details about the conference and workshop.
The minutes are also online now.
April 9th, 2009 - OpenVAS now beyond 10000 Network Vulnerability Tests
Passing the 10000th Network Vulnerability Test (NVT) is a perfect occasion to report about the progress of the OpenVAS project[1].
In October 2008 the systematic development of new NVTs started with a base of around 5800 Tests. With the release of OpenVAS 2.0 in December 2008, the development was boosted and has now reached an average of 10 code updates per day. The public OpenVAS NVT Feed Service delivers 3-10 new vulnerability tests every day.
Older news can be found in the news archive.
Contact
The best way to contact the OpenVAS development team is to subscribe to the discussions mailing list or to contact the team in our Online Chat.
The OpenVAS web site and development platform is currently operated by:
Intevation GmbH
Neuer Graben 17
49074 Osnabrück
Germany
www.intevation.de
Authorized: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
Registered as: HR B 18998, Amtsgericht Osnabrück
VAT ID: de 204 854 484
E-Mail: info@intevation.de
Phone: +49 541 33508-30