AWS Security Hub VS OpenVAS

AWS Security Hub Reviews

OpenVAS Reviews

AWS Security Hub mentions (9)

• Bridging Code and Security: Unveiling the Power of DevSecOps

  AWS Security Hub for centralized security monitoring, providing a comprehensive view of your security state within AWS. - Source: dev.to / about 1 month ago

• Tracking your security posture in AWS

  AWS Security Hub is the service for your cloud security posture management. And this works for smaller organizations and when you don’t have your own config rules. Security Hub will only show you the compliance scores of standards that AWS provides. Plus, it will not give you historical insight of the scores. This does not need to be a problem. Having historical insight can help a lot when you interact with the... - Source: dev.to / 2 months ago

• Securing Your AWS Infrastructure: Deploying AWS Security Services with Terraform

  References Https://aws.amazon.com/security/ Https://www.terraform.io/ Https://aws.amazon.com/waf/ Https://aws.amazon.com/security-hub/ Https://registry.terraform.io/providers/hashicorp/aws/latest/docs AWS Security Best Practices: https://d1.awsstatic.com/whitepapers/Security/AWS_Security_Best_Practices.pdf. - Source: dev.to / about 1 year ago

• MetaHub, a NEW command-line utility for AWS Security Hub.

  MetaHub is a command line utility for AWS Security Hub that lets you work with multiple standards, multiple checks, and thousands of findings in a very simple and advanced way by sorting, aggregating, filtering, and updating your data. In addition, MetaHub adds MetaChecks, an effortless and flexible way to do any tests on top of your resources to improve the level of confidence in your findings. Source: over 1 year ago

• Managing AWS at scale; multi-account strategy

  On top of this, AWS has several tools aimed toward centralized observability and security, which all support and promote multi-account strategies such as AWS Security Hub, AWS Config and AWS GuardDuty. - Source: dev.to / over 1 year ago

OpenVAS mentions (6)

• Link CVE to installed applications?

  Otherwise your on the right path checkout the open source Greenbones OpenVAS (this was Nessus before they closed source and became corporate) or Project Discovery Nuclei. Source: about 1 year ago

• What should I be doing as the sole sysadmin for a company to keep up with security?

  Personally, I was lucky enough to get a license to Nessus for my own scanning, however you can use OpenVAS for some free to scan. Scanners aren't 100% correct no matter where you go but it'll give you some things to look at. OpenVAS. Source: almost 2 years ago

• Wanting to protect my own homelab

  Https://openvas.org/ OpenVAS is free and fairly capable. It might struggle cpu on a pi... Might need quite a bit of ram, but I'm hoping you've got some beefier kit in your stack. Source: about 2 years ago

• Free nessus equivalent?

  Maybe OpenVAS would fill the bill. It’s been on my list of things to check out. Source: over 2 years ago

• Internal Vulnerability Scanning

  OpenVAS - https://openvas.org Try it first, its free, just download a prebuilt VM and you're off and running. I found it valuable for my clients. Source: over 2 years ago