Re: [Discuss] External network scanning service

2015-03-30 Thread Matt Shields
Thanks Tom Dan, I'll check them out. At a previous company our security officer used the self-hosted Nessus. Matt On Sat, Mar 28, 2015 at 7:30 AM, Dan Ritter d...@randomstring.org wrote: On Fri, Mar 27, 2015 at 04:28:35PM -0400, Tom Metro wrote: Matt Shields wrote: I'm looking for a

Re: [Discuss] External network scanning service

2015-03-30 Thread Richard Pieri
On 3/27/2015 4:28 PM, Tom Metro wrote: So why the lack of SaaS offerings? Is it due to technical reasons or because of fear of liability? Liability most likely. Given how computer crimes are charged and prosecuted in the US, a complete port scan of a node, from port 1 to port 65K could be

Re: [Discuss] External network scanning service

2015-03-30 Thread Timchenko, Maxim
On 3/28/2015 12:00 PM, discuss-requ...@blu.org wrote: So why the lack of SaaS offerings? Is it due to technical reasons or because of fear of liability? (A search did turn up https://www.qualys.com/; I can't find pricing on their site.) It sure seems like there ought to be a market for this.

Re: [Discuss] External network scanning service

2015-03-28 Thread Dan Ritter
On Fri, Mar 27, 2015 at 04:28:35PM -0400, Tom Metro wrote: Matt Shields wrote: I'm looking for a SAAS that I can add my subnets and they will scan them daily and check for open ports and known vulnerabilities, etc and send us a report. I asked a similar question back in June:

[Discuss] External network scanning service

2015-03-27 Thread Matt Shields
I've used a number of open source tools such as nmap, Nessus, Saint. I'm looking for a SAAS that I can add my subnets and they will scan them daily and check for open ports and known vulnerabilities, etc and send us a report. They don't necessarily need to be full pen testing, but it would be

Re: [Discuss] External network scanning service

2015-03-27 Thread Tom Metro
Matt Shields wrote: I'm looking for a SAAS that I can add my subnets and they will scan them daily and check for open ports and known vulnerabilities, etc and send us a report. I asked a similar question back in June: http://www.mail-archive.com/discuss%40blu.org/msg09068.html Although my