Side by side
Nmap vs OpenVAS
Both stand on vulnerability scanning software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan LinuxMacSelf-hosted+1
Nmap combines discovery and scanning functions with scripting and companion tools. It is free for end users, while commercial redistribution requires separate OEM licensing.
Visit Nmap
Free plan APILinuxMac+3
OpenVAS covers a broad range of IT targets, with commercial deployment options that remain within a customer's environment. Its free edition has notable update, feature, and support limitations.
Visit OpenVASThe facts
| Nmap | OpenVAS | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | Linux, Mac, Self-hosted, Windows | API, Linux, Mac, Self-hosted, Web, Windows |
| Lowest paid plan | See the plans | OPENVAS BASIC: €2,524 a year |
| Plans published | 7 | 3 |
| Maker | Not published | Not published |
| Website | nmap.org | openvas.org |
| On vulnerability scanning software | #4 of 35 | #8 of 35 |
Nmap: what it does well
- Scans TCP and UDP ports and detects operating systems.
- Scripting engine runs bundled or user-written scripts.
- Suite includes Zenmap, Ncat, Ndiff and Nping.
- Free end-user license.
What to know first
- Most port scan types require privileged access.
- It is not a comprehensive vulnerability scanner.
- Commercial product redistribution requires an OEM license.
- Free version has no warranty.
OpenVAS: what it does well
- Supports authenticated and unauthenticated testing.
- Vulnerability tests are updated daily.
- Scans container images and authenticated endpoints.
- Can run within the customer's environment.
- Integrates with ServiceNow, Splunk, and Nagios.
What to know first
- OPENVAS FREE cannot update itself.
- Free edition lacks schedules and notifications.
- Free edition has no default enterprise support.
- OPENVAS BASIC excludes API access and sensors.