RE: QualysGuard

["wnorth" <wnorth () verizon net>]

Eric,

Try nessus, it's open source, has better vulnerability detection than most
tools out there that are commercial, plus I've found that it tends to be
more accurate when it comes to vulnerabilities, though even with a scanner
the process of validation doesn't stop with printing the report. ;-)

However, if you are looking for an all around vulnerability detection
software for web, db etc. You should look at things like appscan, or shadow
security scanner, etc. There are quite a few out there, to each his own is
my stand point, what one person likes someone else hates, but it all
requires validating the findings, typically via manual methods (e.g. testing
an exploit via manual steps or running some public exploit).

-Wes

-----Original Message-----
From: Eric Danso [mailto:edanso () myblackberry com] 
Sent: Tuesday, August 24, 2004 8:50 AM
To: pen-test () securityfocus com
Subject: QualysGuard

Has anyone on this list had a chance to use this product.

I'm interested in getting a Vulnerability scanner that is the defacto of the
Industry.

Any info would be great.
Regards,

Eric Danso



------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
-------------------------------------------------------------------------------