Yashy

IT Help Desk Technician

Jazz Marie Kaur

<div>
Thank you all for helping out. All of you had very helpful answers.&nbsp;
</div>


Thank you all for helping out. All of you had very helpful answers. 

<div>
<div class="content wysiwyg-content fr-view">
hi guys, <br><br>We used to use a tool called Tenable.io for scanning our internal network for vulnerabilities. It did great reporting, but it was quite expensive to renew. Anyway, I'm not sure if anybody on here is familiar with it? And if not, perhaps you guys know a decent open source vulnerability management tool which can report on common vulnerabilities and exposure, such as your certificates, your patching, your smb versions etc. <br>Thanks for helping<br>Yashy
</div>
</div>



hi guys,
We used to use a tool called Tenable.io for scanning our internal network for vulnerabilities. It did great reporting, but it was quite expensive to renew. Anyway, I'm not sure if anybody on here is familiar with it? And if not, perhaps you guys know a decent open source vulnerability management tool which can report on common vulnerabilities and exposure, such as your certificates, your patching, your smb versions etc.
Thanks for helping
Yashy

Looking for open source tools for vulnerability management ?

A vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness, known as the attack surface. Vulnerability management is the cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities. Other vulnerabilities include security risks, security defects and constructs in programming languages that are difficult to use properly.

Vulnerabilities

Network Management involves issues that are independent of specific hardware or software, including email policies, upgrade planning, backup scheduling and working with managed service providers for Desktop-As-A-Service (DaaS), Software-As-A-Service (SaaS) and the like through the use of tools, coupled with manufacturer standards, best practice guidelines, policies and procedures plus all other relevant documentation. Network management also includes monitoring, alerting and reporting, management reporting, planning for device or service updates, the backup of configurations, the setting of key performance indicators and measures (KPIs/KPMs), associated service level agreements and problem records as part of the IT Service Management (ITSM) framework.

Network Management

Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.

Network Security

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.