Technology partner
Greenbone Partner for Vulnerability Management
Find known vulnerabilities before attackers do.
Greenbone turns vulnerability management into a routine: the solution checks your IT automatically and regularly for known vulnerabilities and insecure configurations – based on the open-source scanner OpenVAS and with vulnerability tests updated daily. As a Greenbone partner, we advise you on choosing the right option, support the rollout, and integrate the results into your existing processes.
- Open-source foundation
- Daily feed updates
- Vendor based in Germany
Overview
What is Greenbone Vulnerability Management?
The company behind Greenbone is Greenbone AG, based in Osnabrück, Germany – a vendor of vulnerability management solutions. At the heart of its solutions is OpenVAS, an open-source scanner largely developed by Greenbone. Since 2025, the vendor has also been marketing its commercial products under the OPENVAS brand: the appliances are now called OPENVAS SCAN (formerly Greenbone Enterprise Appliance or Greenbone Security Manager), and the vulnerability feed is called OPENVAS ENTERPRISE FEED. The company continues to operate as Greenbone AG. The scanner checks servers, workstations, network components, and other connected devices for known security vulnerabilities, outdated software versions, and insecure settings. Greenbone summarizes the results in reports with severity ratings and remediation guidance.
The checks are based on a feed of vulnerability tests that Greenbone updates daily. As soon as a test for a newly published vulnerability is available in the feed, your next scans include it automatically. This keeps the checks in line with the current threat landscape – without you having to maintain test rules yourself.
IT environments change constantly. New servers and cloud services are added, test systems are forgotten, updates are left pending. A penetration test shows the state on a specific date – regular scans reveal, in the time between tests, where patches are missing or configurations deviate from the intended baseline.
Regulatory frameworks also require a structured approach to vulnerabilities. In Annex A (control 8.8), ISO/IEC 27001:2022 requires organizations to obtain information about technical vulnerabilities, evaluate their own exposure, and respond appropriately.
The NIS2 Directive (EU) 2022/2555 explicitly lists vulnerability handling among its risk management measures, and Art. 32 GDPR requires a process for regularly testing the effectiveness of technical and organizational measures. A documented scanning process provides traceable evidence for this.
Scanner and pentest
Greenbone and penetration testing – breadth meets depth
A scanner sees a lot but doesn’t understand context. A typical example: the scan reports that SMB signing is not enforced on several Windows servers – one finding among many that easily gets lost in a long list. The penetration test shows that this very weakness, combined with other misconfigurations, enables a relay attack all the way to domain takeover.
What’s more, logic flaws in custom-built applications – such as an ordering process in which prices can be manipulated – usually remain hidden from a scanner. That’s why we recommend both: regular scans for breadth and timeliness, plus penetration tests at fixed intervals and after major changes for depth.
Scan results also help define the scope of a pentest precisely. After the test, Greenbone lets you continuously verify that fixed vulnerabilities stay fixed. Don’t want to run your own scanner? Then our vulnerability assessment is an alternative.
Use cases
Typical use cases for Greenbone
Operations
Continuous vulnerability management
Regular scans of all network segments provide an up-to-date overview – prioritized, traceable, and with clear responsibilities for remediation.
- Scheduled scans for all relevant network segments
- Delta reports for new and fixed findings
- Handover to patch and ticketing processes
Evidence
Compliance and audit preparation
Automated policy checks, for example against selected modules of the IT-Grundschutz Compendium, support ISMS managers with ISO/IEC 27001, NIS2 requirements, and internal audits.
- Recurring checks instead of spot checks
- Documented results as audit evidence
- Early detection of deviations from the baseline
Architecture
Segmented and sensitive networks
Distributed sensors scan sites, the DMZ, or production networks from within each segment. When operated as an appliance, the results stay in your own infrastructure.
- Central control, local scans
- Cautious scan profiles for sensitive OT components
- Data storage in your own data center
Rollout with Rootsektor
Your Greenbone partner: how we support the rollout
We advise on selection, support the rollout, and integrate Greenbone into your existing workflows – so that scan results turn into fixed vulnerabilities. Rootsektor is listed in Greenbone AG’s official partner directory.
-
01
Initial consultation & objectives
We clarify which networks and systems should be scanned, which requirements apply – for example from ISO 27001 or NIS2 – and who will handle the results. On request, we sign a non-disclosure agreement in advance.
-
02
Choosing the right option
OPENVAS SCAN as a hardware or virtual appliance or – for smaller environments – OPENVAS BASIC: we advise on what fits your size, network structure, and data storage requirements. Greenbone is moving OPENVAS SCAN licensing to a model based on the number of assets to be scanned; newer models such as OPENVAS SCAN VIRTUAL already support it.
-
03
Rollout & configuration
We support the setup of target systems, credentials for authenticated scans, scan profiles, and schedules – with cautious settings for sensitive systems.
-
04
Integration into your processes
Findings flow into patch, change, and ticketing processes. Together, we define responsibilities, deadlines, and escalation paths.
-
05
Review & fine-tuning
We go through the first results with your team, classify false positives, and refine the configuration.
Request a Greenbone quote
To get a quote for renewing or extending your subscription, all we need is your contact details and the identifier of your subscription key – that is, its name, e.g., gsf2022122017. You’ll find it in your appliance’s GOS administration menu under “About”. We don’t need the key itself, so please don’t paste its contents. We’ll obtain the specific quote from Greenbone AG and get back to you. Your request is non-binding.
FAQ
Frequently asked questions about Greenbone
Didn’t find your question? Call us at +49 2932 465265-0 or email info@rootsektor.de.
Is Greenbone the same as OpenVAS?
Not quite. Greenbone is the vendor; OpenVAS is the open-source scanner that Greenbone largely develops and extends with management, a web interface, reports, and the vulnerability feed into a complete solution. Greenbone now also uses “OPENVAS” as the brand name for its products. In addition to the free editions OPENVAS FREE and OPENVAS COMMUNITY EDITION, there are commercial products with the OPENVAS ENTERPRISE FEED, support, and appliance operation.
Which editions are available – and what happened to the Greenbone Security Manager?
The appliances formerly known as Greenbone Security Manager (GSM) and later as Greenbone Enterprise Appliance are now called OPENVAS SCAN; model designations such as EXA or 600 remain unchanged. OPENVAS SCAN is available as a hardware or virtual appliance with the same feature set. For smaller environments with fewer than 150 assets, there is OPENVAS BASIC; OPENVAS FREE and the OPENVAS COMMUNITY EDITION are suitable for trying it out free of charge. Which solution fits depends on the number of assets, your network structure, and your data storage requirements – we clarify this in the initial consultation.
How often should we scan?
That depends on how quickly your environment changes and how critical the systems are. Weekly to monthly scans are a good starting point for many networks; systems reachable from the internet should be checked more often. After major changes, an additional targeted scan is advisable.
Can scans disrupt day-to-day operations?
Scans are designed for production environments, but individual systems can still react sensitively – such as older devices or control components in OT networks. That’s why we agree on scan profiles, time windows, and exclusions in advance and start with cautious settings. For industrial environments, a specialized OT and ICS pentest is also worth considering.
Does Greenbone replace a penetration test?
No. The scanner finds known vulnerabilities and misconfigurations across the board. A penetration test goes deep: it chains findings into attack paths, finds logic flaws in applications, and shows what an attacker can actually achieve. The two complement each other.
Does Greenbone help with BSI IT-Grundschutz and ISO 27001?
Yes, as one building block. Greenbone can automatically check systems against selected modules of the IT-Grundschutz Compendium and provides documented results that can serve as evidence in audits. The scanner replaces neither an ISMS nor an audit, but it supports the required systematic handling of technical vulnerabilities.
Where are scan results stored?
When operated as a hardware or virtual appliance, scans and data storage run in your own infrastructure.
Discuss your Greenbone rollout
Want to build vulnerability management with Greenbone or better integrate an existing installation into your workflows? Tell us about your environment – we’ll get back to you for a non-binding initial consultation.