OpenVAS vs Qualys Scanner Appliance
OpenVAS
openvas.orgQualys Scanner Appliance
docs.qualys.comSide by side
| Figure | OpenVAS | Qualys Scanner Appliance |
|---|---|---|
| Price from | €210.33/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 0 |
| Spec score · Network Vulnerability Scanners | 8.6 (#5) | 7.1 (#15) |
| Deployment | OPENVAS SCAN is available as hardware or virtual appliances and can run entirely within the customer's environment. | Scanner options include physical, virtual, containerized, offline, and Qualys-managed perimeter scanners. |
| Founded | 2008 | 1999 |
| Headquarters | Osnabrück, Germany | Foster City, California, USA |
| Integrations | OPENVAS SCAN lists integrations with ServiceNow, Splunk, Nagios, Sourcefire, and CyberArk. | The scanner overview lists support for vaults including Secret Server, CyberArk, and Azure Key Vault, and for Thales HSM, HashiCorp, and BeyondTrust PBPS. |
| Purpose | OPENVAS is a vulnerability scanner for detecting weaknesses in IT systems. | The appliance scans assets on internal or internet-facing networks for vulnerabilities and compliance issues. |
| Security | OPENVAS FREE uses a self-signed TLS certificate that browsers treat as insecure and require adding as an exception. | The scanner initiates outbound HTTPS communication to Qualys platform endpoints and has no listening TCP ports or inbound internet connection requirement. |
| Support | OPENVAS FREE has no default enterprise support; product questions are handled voluntarily through the Greenbone Community Portal. | The documentation directs users to Qualys Support for information about perimeter scanner subscription details. |
Plans
In their own words
OpenVAS
OPENVAS is a vulnerability scanner for identifying weaknesses in IT systems. It supports authenticated and unauthenticated testing across internet and industrial protocols, with performance tuning for large scans, and uses a vulnerability-test feed updated daily. The commercial OPENVAS SCAN product checks network services, servers, applications, container images, and authenticated endpoints for vulnerabilities, misconfigurations, and missing patches. It is offered as hardware or virtual appliances and can run entirely inside a customer's environment. Listed integrations include ServiceNow, Splunk, Nagios, Sourcefire, and CyberArk. OPENVAS FREE is a cross-platform virtual appliance intended for private use and non-professional IT infrastructures. It uses the Community Feed, cannot update itself, and lacks schedules, notifications, integrated backups, and air-gap support. The free edition has no default enterprise support, and its self-signed TLS certificate requires a browser exception. OPENVAS BASIC costs €2,524 a year; it excludes API access, sensors, remediation tickets, and Greenbone Support. OPENVAS SCAN pricing is by quote.
Qualys Scanner Appliance
Qualys Scanner Appliance has no write-up on Specifiction yet; its figures are above.