OpenVAS vs Sirius
OpenVAS
openvas.orgSirius
opensecurity.comSide by side
| Figure | OpenVAS | Sirius |
|---|---|---|
| Price from | €210.33/mo | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 2 |
| Spec score · Vulnerability Scanning Software | 8.5 (#6) | 7.9 (#13) |
| Deployment | OPENVAS SCAN is available as hardware or virtual appliances and can run entirely within the customer's environment. | Sirius supports installer-first Docker Compose deployment, with production and development modes. |
| Founded | 2008 | 2014 |
| Headquarters | Osnabrück, Germany | San Antonio, Texas |
| Purpose | OPENVAS is a vulnerability scanner for detecting weaknesses in IT systems. | Sirius is an open-source vulnerability scanner that combines network discovery, CVE detection, agent telemetry, and operator-driven triage. |
| Support | OPENVAS FREE has no default enterprise support; product questions are handled voluntarily through the Greenbone Community Portal. | Community support is available through Discord, GitHub Issues, and GitHub Discussions; the support page also describes enterprise priority support with dedicated channels and SLA guarantees. |
Plans
In their own words
OpenVAS
OPENVAS is a vulnerability scanner for identifying weaknesses in IT systems. It supports authenticated and unauthenticated testing across internet and industrial protocols, with performance tuning for large scans, and uses a vulnerability-test feed updated daily. The commercial OPENVAS SCAN product checks network services, servers, applications, container images, and authenticated endpoints for vulnerabilities, misconfigurations, and missing patches. It is offered as hardware or virtual appliances and can run entirely inside a customer's environment. Listed integrations include ServiceNow, Splunk, Nagios, Sourcefire, and CyberArk. OPENVAS FREE is a cross-platform virtual appliance intended for private use and non-professional IT infrastructures. It uses the Community Feed, cannot update itself, and lacks schedules, notifications, integrated backups, and air-gap support. The free edition has no default enterprise support, and its self-signed TLS certificate requires a browser exception. OPENVAS BASIC costs €2,524 a year; it excludes API access, sensors, remediation tickets, and Greenbone Support. OPENVAS SCAN pricing is by quote.
Sirius
Sirius is an open-source vulnerability scanner for security teams that want operator control over discovery and triage. It combines network discovery, CVE detection, agent telemetry, and scanning through Nmap and Naabu. The Vulnerability Navigator provides severity groupings, CVSS-based filters, and export options; the Operator Console supports command execution, command history, and active-agent management. Dashboards show service health, infrastructure metrics, vulnerability trends, and centralized logs. Sirius can run in production or development mode through Docker Compose. Its listed minimum requirements are Docker Engine 20.10.0+ with Compose V2, 4 GB RAM, and 10 GB of free disk space. Supported host systems are Linux, macOS, and Windows through WSL2. REST endpoints on port 9001 use an API key, with documentation linking to an API reference and Go SDK. The Sirius Scan plan is free for self-hosted Docker use. Community support is available through Discord, GitHub Issues, and GitHub Discussions; the support page also describes enterprise priority support.