From: Julio Uricari (uricari@gmail.com)
Date: Wed Aug 24 2005 - 14:26:08 EDT
a time ago I saw and analyse Qualys and in my opinion it has too many
false possitives, for instance some patches that seems to be missing ,
but when you go to check the server thay era already installed., but
its just a subjective opinion.
Sorry for my english.
LIUX
On 8/24/05, Stefano Zanero <s.zanero@securenetwork.it> wrote:
> The products from the Italian company e-Maze do just the same:
> http://www.emaze.net/English/products/index.htm
>
> I agree with your concerns regarding the transmission of such sensitive
> data to an outsourcer, in particular for entities with strict auditing
> regulations.
>
> In addition, I find (as always) that calling a simple automated scan a
> "Vulnerability assessment", "Risk assessment" or even a "Penetration
> test" (sigh) is an offense for anybody who professionally engages in
> these activities.
>
> Best,
> Stefano Zanero
> ---------------------------
> Secure Network S.r.l.
> www.securenetwork.it
>
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:47 EDT