OPENVAS SECURITY INTELLIGENCE

Centralized Risk Analytics

Centralized Management

CSAF and SBOM Analysis

REST API Integration

From Vulnerability Detection to Centralized Security Intelligence

OPENVAS SECURITY INTELLIGENCE acts as the management and intelligence layer for distributed vulnerability scanning with multiple OPENVAS SCAN systems. It consolidates scan results from distributed environments, enriches findings with contextual information and provides centralized visibility across assets and vulnerabilities.

This creates a clear and centralized vulnerability management process. Security teams gain visibility across distributed scan environments and additional vulnerability intelligence through CSAF advisories and SBOM analysis.

Consolidated Risk Analytics

Central dashboards across multiple OPENVAS SCAN systems with aggregated vulnerability data.

Centralized Management

Centralized management of distributed OPENVAS SCAN systems and scan tasks.

Vulnerability Intelligence

CSAF advisories and SBOM analysis provide additional vulnerability context for prioritization.

Centralized Visibility for Vulnerabilities and Assets

OPENVAS SECURITY INTELLIGENCE provides centralized visibility of vulnerabilities and assets across multiple OPENVAS SCAN systems.

Scan results from distributed environments are consolidated into a central interface, making it easier to identify affected assets and review vulnerability severity.

By combining scan data with CSAF advisories and SBOM information, the platform adds relevant context for prioritization.

Request more information

Key Capabilities of OPENVAS SECURITY INTELLIGENCE

OPENVAS SECURITY INTELLIGENCE combines centralized reporting, management of distributed OPENVAS SCAN systems and vulnerability intelligence in one platform. It supports consolidated reporting, asset and vulnerability consolidation, advisory integration and automated security workflows.

Aggregated Vulnerability and Asset Data

Central visibility of vulnerabilities and assets across multiple OPENVAS SCAN systems.

Centralized Control of OPENVAS SCAN Systems

Manage distributed OPENVAS SCAN systems and control scan tasks centrally.

Integration in Security Workflows

Integrate and process vulnerability data in security workflows and third-party systems for automated remediation and response.

Scalable Federated Security Architectures

Model complex federated environments with a flexible structure that supports everything from air-gapped setups to fully integrated deployments.

Independent Security Intelligence Data

Combine independent security intelligence feeds like EUVD, KEV, CSAF, and NVD in one central platform for more informed and efficient vulnerability management.

SBOM-Based Vulnerability Analysis

Identify vulnerable software components using SBOM data in CycloneDX format. This allows known vulnerabilities in included components to be specifically identified and evaluated.

Centralized Control of Distributed Environments

OPENVAS SECURITY INTELLIGENCE acts as the central security hub and intelligence layer for distributed environments. It consolidates security data and enables a holistic view over the whole IT landscape.

Network Scanning

Centralize network-based vulnerability findings to create a consistent and actionable view across your infrastructure.

Agent Based Scanning

Bring agent-based insights into one central layer for deeper visibility across endpoints and internal systems.

Container Scanning

Consolidate container security findings in one place to improve visibility across dynamic and cloud-native environments.

SBOM Scanning

Integrate SBOM-based intelligence centrally to identify vulnerable components and strengthen software supply chain visibility.

FAQ – OPENVAS SECURITY INTELLIGENCE

What is OPENVAS SECURITY INTELLIGENCE?

OPENVAS SECURITY INTELLIGENCE is Greenbone’s central management and intelligence platform for distributed OPENVAS SCAN systems. It consolidates vulnerability scan results, provides centralized reporting and management, and enriches findings with additional context such as CSAF security advisories and SBOM based vulnerability analysis.

The platform enables organizations to aggregate scan results across multiple environments, analyze vulnerabilities in a unified dashboard and prioritize remediation based on contextual vulnerability intelligence.

What distinguishes OPENVAS SECURITY INTELLIGENCE from OPENVAS SCAN?

OPENVAS SCAN is the vulnerability detection component. It performs vulnerability scans and identifies security issues in systems and networks.

OPENVAS SECURITY INTELLIGENCE acts as the centralized management and analysis layer above multiple OPENVAS SCAN systems. It aggregates scan results, provides consolidated dashboards, enables centralized administration of distributed scanners and enriches findings with CSAF advisories and SBOM based vulnerability intelligence.

For which use cases is OPENVAS SECURITY INTELLIGENCE particularly suited?

OPENVAS SECURITY INTELLIGENCE is designed for organizations operating distributed scan infrastructures or managing large numbers of assets and vulnerabilities.

Typical use cases include centralized vulnerability reporting across multiple environments, management of distributed OPENVAS SCAN systems, compliance reporting and audit preparation, and context based vulnerability prioritization using CSAF advisories and SBOM analysis.

How can OPENVAS SECURITY INTELLIGENCE integrate into existing environments?

OPENVAS SECURITY INTELLIGENCE can be deployed as a virtual machine and integrated into existing IT and security environments.

The platform supports integration with third party systems and security workflows through REST API connectivity and export capabilities, enabling automated data exchange and integration into existing security operations processes.

What is CSAF and why is it relevant for vulnerability management?

CSAF, the Common Security Advisory Framework, is a standardized format for distributing machine readable security advisories.

OPENVAS SECURITY INTELLIGENCE can ingest CSAF advisories from trusted sources such as vendors or national security organizations. These advisories are correlated with detected vulnerabilities to provide additional context and help security teams prioritize vulnerabilities more effectively.

What SBOM format is supported?

OPENVAS SECURITY INTELLIGENCE supports vulnerability analysis based on Software Bills of Materials (SBOM) in the CycloneDX format.

By analyzing SBOM data, the platform can identify vulnerable components within software dependencies and correlate them with known vulnerabilities, providing additional transparency and improved vulnerability prioritization.

How many OPENVAS SCAN systems can be connected?

OPENVAS SECURITY INTELLIGENCE is designed to aggregate results from multiple OPENVAS SCAN systems in distributed environments.

This allows organizations to manage scanning infrastructures across different locations, network segments or business units while maintaining centralized visibility and control over vulnerabilities and assets.