Tripwire IP360
tripwire.com
What it is
Tripwire IP360 is vulnerability management software that discovers and profiles network assets, then assesses vulnerability risk. It scans devices and software across on-premises, cloud, and container environments using agent-based and agentless methods, including credentialed scans. Its application-centric fingerprinting selects signatures relevant to device and application types to limit unnecessary interactions. Vulnerabilities are ranked on a 1–50,000 scale using factors such as impact, ease of exploitation, and age. A web interface supports administration, configuration, reporting, and workflow, with granular access controls and user roles. The product provides open APIs and uses open standards; named example integrations include ServiceNow, Splunk Enterprise, LinkShadow, and RedSeal. On-premises deployments use hardened Linux-based virtual or physical appliances, and scanning appliances can be pooled. Tripwire also offers the product as a managed service through ExpertOps. A 30-day evaluation license is listed at free for up to 100 IP addresses, for businesses subject to vendor review. Paid licensing is quote-based.
Spec sheet
- Purpose
- Tripwire IP360 provides vulnerability management by discovering and profiling network assets and assessing their vulnerability risk.Read 7 Oct 2026 · tripwire.com
- Deployment
- The on-premises solution uses hardened Linux-based virtual or physical appliances, and scanning appliances can be pooled.Read 7 Oct 2026 · tripwire.com
- Integrations
- The vendor lists ServiceNow, Splunk Enterprise, LinkShadow, and RedSeal as example integrations and says IP360 uses open standards.Read 7 Oct 2026 · tripwire.com
- Security
- The management console uses a locked-down Linux operating system, strong encryption for communications, and frequent system, security, and vulnerability signature updates.Read 7 Oct 2026 · tripwire.com
- Support
- Tripwire support offers a customer portal for knowledge base, product videos, documentation, and creation and management of support cases.Read 7 Oct 2026 · tripwire.com
- Founded
- 1997Read 28 Sep 2026 · tripwire.com
- APIs
- Tripwire IP360 provides open APIs for integrating vulnerability management with help desk and asset management solutions.Read 7 Oct 2026 · tripwire.com
- Asset discovery
- It discovers and profiles devices and software across on-premises, cloud, and container environments using agentless and agent-based scans.Read 7 Oct 2026 · tripwire.com
- Intended customers
- Tripwire says its customers include organizations in finance, retail, industrial, healthcare, and government.Read 7 Oct 2026 · tripwire.com
- Maker history
- Tripwire says its founder Gene Kim founded Tripwire, Inc. in 1997, and that the company became part of Fortra in 2022.Read 7 Oct 2026 · tripwire.com
- Managed service
- The complete functionality is available as a managed service through Tripwire ExpertOps, which includes consulting and cloud-based infrastructure.Read 7 Oct 2026 · tripwire.com
- Management interface
- The product provides a web interface for administration, configuration, reporting, and workflow, with granular access controls and user roles.Read 7 Oct 2026 · tripwire.com
- Risk scoring
- It ranks vulnerabilities using factors including impact, ease of exploitation, and age, with scores on a 1–50,000 scale.Read 7 Oct 2026 · tripwire.com
- Scanning
- Its application-centric fingerprinting runs relevant signatures for device and application types to limit unnecessary interactions.Read 7 Oct 2026 · tripwire.com
- Virtual platforms
- The vendor lists VMware ESXi, Hyper-V, Microsoft Azure, Amazon EC2, VirtualBox, VMware Workstation, and VMware Fusion for its virtual appliances.Read 7 Oct 2026 · tripwire.com
Plans and prices
Strong points and limits
Strong points
- Scans on-premises, cloud, and container environments.
- Supports agent-based, agentless, and credentialed scans.
- Ranks vulnerabilities on a 1–50,000 scale.
- Provides open APIs and named integrations.
- 30-day evaluation covers up to 100 IP addresses.
Limits
- Evaluation applications are limited to businesses.
- Evaluation is subject to vendor review.
- Paid licensing is quote-based.
Who it suits
IP360 is intended for organizations managing vulnerability risk across network assets, including those in finance, retail, industrial, healthcare, and government. It may suit teams seeking appliance-based deployment, open APIs, or a managed-service option.
Verdict
IP360 combines asset discovery, vulnerability scoring, and multiple deployment options, including a managed service. The evaluation license has business eligibility and vendor-review conditions, while paid licensing is quote-based.
Where Specifiction places it
- Network Vulnerability Scanners#13 of 237.4