Hello everyone,
I’ve been looking at increasing the security of my homelab, i’d like to do so for both physical hosts, VMs and docker containers. The first thing I stumbled on is OpenVAS but the docker compose for that is absolutey huge. Does anyone actually use OpenVAS at home and would you recommend it ?
I have done some testing with it a long while ago but I don’t currently use it. From a security standpoint this falls under CIS Control 7 which say develop a plan to continuously assess and track vulnerabilities on all assets. When doing this for our clients using a tool like OpenVAS helps when you have a lot of software to go over and inventory and confirm is on the latest patches. For my lab that list is much shorter and I have a process to manage the updates on that software and I don’t need a vuln scanner to tell me to remind me to do it.