Nessus is an Android cybersecurity tool for connecting to Nessus scanners and working with network vulnerability scans. It addresses the task of checking local networks and devices for known security weaknesses, regardless of the operating system installed on the computer being assessed. Users can start, stop, or pause scans from a mobile device, review previous results, and check the status of an ongoing scan. After a scan, Nessus provides a report describing the actions performed and the data acquired. Its plugin-based approach uses a database of known vulnerabilities, while customizable policies let users focus analysis on the systems, protocols, and technologies relevant to their network.
What can you control from an Android device?
The app allows users to log into their Nessus scanners and manage active vulnerability scans. Available actions include starting a scan, stopping it, and pausing it when necessary. Users can also create and execute new scans and templates from the app.
How are scan results presented?
Nessus displays scan reports directly on the Android device. Reports detail the actions performed and the data acquired, while result-display and filtering functions help users examine the information. The app can also be used to search previous scan results and check the status of an ongoing scan.
Can the vulnerability checks be adapted to a specific network?
Users can define security policies according to their needs and remove analysis areas that do not apply to the network. For example, a policy for a Microsoft Windows network can omit Unix vulnerability checks.
What does the plugin database cover?
The plugins tab available when editing or creating a policy lists resources Nessus can process. These resources relate to different operating systems, network protocols, firewalls, and database management systems. The scanner uses the plugin database to look for known vulnerabilities and their weaknesses.
Who may use Nessus?
Nessus may be useful to people who need mobile access to Nessus scanners, vulnerability reports, and scan status during security or incident-response work. The source describes the app as available under a free license and able to adapt its checks to different network configurations.