Comments on: Changes to the Nessus license http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/ The views of one man on security, privacy and anything else that catches his attention Wed, 20 Aug 2008 08:43:45 +0000 http://wordpress.org/?v=abc By: AlexT http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-2150 AlexT Wed, 11 Jun 2008 17:37:13 +0000 http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-2150 "You are all missing the point. I have been using Nessus for a long time. They have made a company on the backs of open source, and now they want to start charging money?" "It flies in the face of everything we believe in." Nessus 2.0 is still open source. Download it, run it, develop your own NVTs, etc. However, the belief that Tenable somehow owes you free access to the NVTs they pay to develop is ridiculous. “You are all missing the point. I have been using Nessus for a long time. They have made a company on the backs of open source, and now they want to start charging money?”

“It flies in the face of everything we believe in.”

Nessus 2.0 is still open source. Download it, run it, develop your own NVTs, etc. However, the belief that Tenable somehow owes you free access to the NVTs they pay to develop is ridiculous.

]]> By: shadowbq http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-2149 shadowbq Wed, 11 Jun 2008 16:28:58 +0000 http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-2149 OpenVAS is an alternative to Nessus Commercial Feeds OpenVAS is a Nessus 2 opensource fork. It has it's own NVT feed system to get updates. Please contribute. http://www.openvas.org/index.html OpenVAS is an alternative to Nessus Commercial Feeds

OpenVAS is a Nessus 2 opensource fork. It has it’s own NVT feed system to get updates.

Please contribute.

http://www.openvas.org/index.html

]]> By: Shawn http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-2148 Shawn Wed, 11 Jun 2008 15:10:59 +0000 http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-2148 You are all missing the point. I have been using Nessus for a long time. They have made a company on the backs of open source, and now they want to start charging money? You know what they can do with that. I for one, am going to stop using them, and find other methods. Open source, ways. This is ridiculous. Had you told anyone this day would come, they would not have gotten a foot in the door. This is a break of trust, and I doubt the open source community will stand for it. It flies in the face of everything we believe in. You are all missing the point. I have been using Nessus for a long time. They have made a company on the backs of open source, and now they want to start charging money?

You know what they can do with that. I for one, am going to stop using them, and find other methods. Open source, ways.

This is ridiculous. Had you told anyone this day would come, they would not have gotten a foot in the door. This is a break of trust, and I doubt the open source community will stand for it.

It flies in the face of everything we believe in.

]]> By: Martin http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-1927 Martin Sat, 17 May 2008 14:19:23 +0000 http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-1927 PatrickH, I understand you're pain, but if $1200 is unattainable, what other tools can you use in Thailand? Are there open source alternatives to Nessus? I still think Tenable is making the right decision for their business, since the majority of their customer base is going to be here in the US and Canada, with a slightly smaller portion in the EU. They're goal isn't to drive anyone out of business with the cost of software and in comparison to just about anything else out there, Nessus is dirt cheap. Martin PatrickH, I understand you’re pain, but if $1200 is unattainable, what other tools can you use in Thailand? Are there open source alternatives to Nessus? I still think Tenable is making the right decision for their business, since the majority of their customer base is going to be here in the US and Canada, with a slightly smaller portion in the EU. They’re goal isn’t to drive anyone out of business with the cost of software and in comparison to just about anything else out there, Nessus is dirt cheap.

Martin

]]> By: MikeP http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-1924 MikeP Fri, 16 May 2008 23:02:46 +0000 http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-1924 I'm Canadian, not US/EU, but I take your point. Tenable's an American company, so I can't blame them for gearing themselves to the US market, although I sympathize with those left out in the cold. On the other hand, the economy in SE Asia isn't really their problem; making money for their stakeholders is, and if they're being undercut by others, then they need to move to plug the holes. I’m Canadian, not US/EU, but I take your point.

Tenable’s an American company, so I can’t blame them for gearing themselves to the US market, although I sympathize with those left out in the cold. On the other hand, the economy in SE Asia isn’t really their problem; making money for their stakeholders is, and if they’re being undercut by others, then they need to move to plug the holes.

]]> By: PatrickH http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-1911 PatrickH Fri, 16 May 2008 04:55:09 +0000 http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-1911 "I don’t blame Tenable; $1200 a year is totally reasonable for most companies, and if it’s too much for independent pentesters, they should probably really consider charging more for their services." For most companies... In the US or EU. Here is Southeast asia (Thailand), that is a huge amount of money. That is roughly the equivilent of 3 months salary for a full time engineer. Just to further put that into perspective, the $1200 USD sum equates to 1360 average meals here in Thialand vs only 240 in the US (using a very conservative figure of $5 USD per meal). Could the company consider charging more for the services, absolutely. Considering is about all they could do however, as the market would never support it. “I don’t blame Tenable; $1200 a year is totally reasonable for most companies, and if it’s too much for independent pentesters, they should probably really consider charging more for their services.”

For most companies… In the US or EU. Here is Southeast asia (Thailand), that is a huge amount of money. That is roughly the equivilent of 3 months salary for a full time engineer. Just to further put that into perspective, the $1200 USD sum equates to 1360 average meals here in Thialand vs only 240 in the US (using a very conservative figure of $5 USD per meal). Could the company consider charging more for the services, absolutely. Considering is about all they could do however, as the market would never support it.

]]> By: MikeP http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-1905 MikeP Thu, 15 May 2008 21:50:21 +0000 http://www.mckeay.net/2008/05/14/changes-to-the-nessus-license/#comment-1905 I've asked, and for reference, universities count as companies in the context of licensing (except when Nessus is used in a *classroom* setting for *educational* purposes). That is now in the FAQ, but I thought I'd mention it anyway, since a lot of EDU types run Nessus too. I don't blame Tenable; $1200 a year is totally reasonable for most companies, and if it's too much for independent pentesters, they should probably really consider charging more for their services. I’ve asked, and for reference, universities count as companies in the context of licensing (except when Nessus is used in a *classroom* setting for *educational* purposes). That is now in the FAQ, but I thought I’d mention it anyway, since a lot of EDU types run Nessus too.

I don’t blame Tenable; $1200 a year is totally reasonable for most companies, and if it’s too much for independent pentesters, they should probably really consider charging more for their services.

]]>