OpenVAS
Osnabrück, Germany
What it is
OpenVAS is a vulnerability scanner for identifying weaknesses in IT systems. It supports authenticated and unauthenticated testing across internet and industrial protocols, with performance tuning for large scans, and uses a vulnerability-test feed updated daily. The commercial OPENVAS SCAN offering checks network services, servers, applications, container images, and authenticated endpoints for vulnerabilities, misconfigurations, and missing patches. It is available as hardware or virtual appliances and can run entirely within a customer's environment. Listed integrations include ServiceNow, Splunk, Nagios, Sourcefire, and CyberArk. OPENVAS FREE is a cross-platform virtual appliance intended for private use and non-professional IT infrastructures. It uses the Community Feed and cannot update itself; it also excludes schedules, notifications, integrated backups, and air-gap support. The free edition has no default enterprise support, and its self-signed TLS certificate requires a browser exception. OPENVAS BASIC is listed at €2,524 a year and excludes API access, sensors, remediation tickets, and Greenbone Support. OPENVAS SCAN pricing is by quote.
For and against
For
- Vulnerability-test feed is updated daily.
- Supports authenticated and unauthenticated scanning.
- Commercial scans cover servers, applications, and container images.
- Can run within the customer's environment.
Against
- OPENVAS FREE cannot update itself.
- The free edition omits schedules and notifications.
- The free edition has no default enterprise support.
- OPENVAS BASIC costs €2,524 a year.
The verdict
OpenVAS offers a free appliance and a commercial option for broader scanning needs. The free edition's update, feature, support, and certificate limitations are important to weigh before deployment.
Who it suits
OpenVAS suits teams scanning IT systems, including those that need authenticated checks or deployment within their own environment. OPENVAS FREE is intended for private use and non-professional IT infrastructures.
Plans and prices
OPENVAS FREE
Free virtual appliance · community feed · limited enterprise features · no default support
Read 30 Sep 2026 · greenbone.net
OPENVAS BASIC
Entry-level vulnerability management · no API access, sensors, remediation tickets, or Greenbone Support
Read 30 Sep 2026 · greenbone.net
OPENVAS SCAN
Hardware or virtual appliance · pricing by quote
Read 30 Sep 2026 · greenbone.net
On the record
- Commercial support
- Greenbone support for OPENVAS SCAN includes German and English support, software upgrades, and access to the Enterprise Feed with daily updated vulnerability tests and information.greenbone.net · read 30 Sep 2026
- Company certifications
- Greenbone says it has been ISO 9001 and ISO 27001 certified since 2021 and ISO 14001 certified since 2024.greenbone.net · read 30 Sep 2026
- Company history
- Greenbone was founded in Germany in 2008 and lists its headquarters in Osnabrück, Germany.greenbone.net · read 30 Sep 2026
- Deployment
- OPENVAS SCAN is available as hardware or virtual appliances and can run entirely within the customer's environment.greenbone.net · read 30 Sep 2026
- Enterprise scanning
- OPENVAS SCAN scans network services, servers, applications, container images, and authenticated endpoints for vulnerabilities, misconfigurations, and missing patches.greenbone.net · read 30 Sep 2026
- Free edition audience
- OPENVAS FREE is a cross-platform virtual appliance intended for private use and non-professional IT infrastructures.greenbone.net · read 30 Sep 2026
- Free edition limits
- OPENVAS FREE uses the Community Feed, cannot itself be updated, and excludes features such as schedules, notifications, integrated backups, and air-gap support.greenbone.net · read 30 Sep 2026
- Integrations
- OPENVAS SCAN lists integrations with ServiceNow, Splunk, Nagios, Sourcefire, and CyberArk.greenbone.net · read 30 Sep 2026
- Purpose
- OPENVAS is a vulnerability scanner for detecting weaknesses in IT systems.openvas.org · read 30 Sep 2026
- Scanning
- It supports authenticated and unauthenticated testing across internet and industrial protocols, with performance tuning for large scans.openvas.org · read 30 Sep 2026
- Security
- OPENVAS FREE uses a self-signed TLS certificate that browsers treat as insecure and require adding as an exception.greenbone.net · read 30 Sep 2026
- Security reporting
- Greenbone asks users to report product or service security issues to its Security Response Team by email and says it will keep reporters informed.greenbone.net · read 30 Sep 2026
- Support
- OPENVAS FREE has no default enterprise support; product questions are handled voluntarily through the Greenbone Community Portal.greenbone.net · read 30 Sep 2026
- Vulnerability feed
- The scanner uses a feed of vulnerability tests that is updated daily.openvas.org · read 30 Sep 2026
