Anyone know if there is a program that I can either enter my services + versions and have it monitor CVEs and alert me if there is a new match?
Maybe with some kind of automation? Maybe a pipe dream?
Your quest ends with a “network vulnerability scanner” which will scan for open services, compare detected software versions against known CVEs, etc. I used a free trial one many moons ago, but don’t recall which.
| Product | Type | Free Trial | Open Source | Notes |
|---|---|---|---|---|
| SolarWinds Network Configuration Manager (NCM) | Network config/compliance | Yes | No | Focuses on device configuration auditing and vulnerability exposure through firmware/config analysis |
| SolarWinds Security Event Manager (SEM) | SIEM | Yes | No | More focused on security monitoring than vulnerability scanning |
| SolarWinds Observability / Hybrid Cloud Observability | Monitoring platform | Yes | No | Includes security and risk visibility features |
| Tenable Nessus Professional | Vulnerability Scanner | Yes | No | Industry standard standalone scanner [sourceforge.net] |
| Rapid7 InsightVM | Vulnerability Management | Yes | No | Strong remediation workflow capabilities [sourceforge.net] |
| Qualys VMDR | Cloud Vulnerability Management | Yes | No | Enterprise-scale SaaS platform [cipherssecurity.com], [cyber-tools.net] |
| Greenbone/OpenVAS | Vulnerability Scanner | N/A | Yes | Leading open-source vulnerability scanner [senselearner.com], [cyber-tools.net] |
I’m sure @LTS_Tom has a list of other suggestions.
1 Like
Another one that comes to mind is https://www.opencve.io/ but even more important is to have a process that checks for updates for all the software you are using.
1 Like
1 Like
I run renovate bot every day against the services, but that doesn’t check the servers, VMs and LXCs. I have to sort out a regular ansible update/upgrade schedule.