ManageEngine Vulnerability Manager Plus vs OpenVAS

ManageEngine Vulnerability Manager Plus identifies and assesses vulnerabilities across a network and helps teams prioritize and remediate them. Its risk prioritization uses AI-based scores, CVSS severity, EPSS and active attack trends. It includes out-of-the-box policies for more than 130 CIS benchmarks and supports downloading, testing and deploying patches across operating systems and more than 1,500 third-party applications. Pre-built, tested scripts can mitigate zero-day vulnerabilities. The product can discover network devices, scan firmware for vulnerabilities and remediate identified threats, but network-device management is on-premises only and requires extra licenses. Vulnerability Manager Plus supports Windows and Linux; macOS support is limited to patch management. It offers a free edition and a 30-day trial with unlimited endpoints. Listed annual prices include Professional On-Premises at $695 a year and Professional Cloud at $895 a year, each for 100 workstations and one technician. Enterprise options are listed at $1,195 a year on-premises and $1,545 a year in the cloud, on the same workstation and technician basis.

OPENVAS is a vulnerability scanner for identifying weaknesses in IT systems. It supports authenticated and unauthenticated testing across internet and industrial protocols, with performance tuning for large scans, and uses a vulnerability-test feed updated daily. The commercial OPENVAS SCAN product checks network services, servers, applications, container images, and authenticated endpoints for vulnerabilities, misconfigurations, and missing patches. It is offered as hardware or virtual appliances and can run entirely inside a customer's environment. Listed integrations include ServiceNow, Splunk, Nagios, Sourcefire, and CyberArk. OPENVAS FREE is a cross-platform virtual appliance intended for private use and non-professional IT infrastructures. It uses the Community Feed, cannot update itself, and lacks schedules, notifications, integrated backups, and air-gap support. The free edition has no default enterprise support, and its self-signed TLS certificate requires a browser exception. OPENVAS BASIC costs €2,524 a year; it excludes API access, sensors, remediation tickets, and Greenbone Support. OPENVAS SCAN pricing is by quote.