Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Is there a website I can log into that will can check various exploits on my system, and basically tell me if it's patched up-to-date?

share

locked by HopelessN00b Dec 5 '14 at 12:09

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. More info: help center.

5 Answers 5

up vote 5 down vote accepted

I think you would be better of by installing Nessus on your own computer. Nessus is free for home use and have a commercial version available too, and it lets you actively probe servers with a wide range of plugins.

Check it out: http://www.nessus.org/nessus/

Also.. could you trust a public webpage that probed your computer for errors? Setting up such a server would probably mean lots of problems for the host, since it would trigger IDS-alerts from other network providers. And you have no guarantee that they won't abuse their findings.

EDIT: Didn't know that they had changed the license on the plugin-feeds. Thanks K. Brian Kelley. Still worth it though. Superb software.

share
    
The plug-ins update is only free if you're a home user. If you're corporate, it's not any longer. nessus.org/plugins/index.php?view=feed –  K. Brian Kelley May 28 '09 at 13:18
    
This is the same software that many professional security companies use to audit networks. It is very powerful. –  Brent May 28 '09 at 14:02
    
I agree, it is a shame they changed the licensing, but they became corporate and you can't blame them. The cost isn't bad, either. However, as soon as they went that direction, we started looking at other pay solutions like eEye's and Qualys. –  K. Brian Kelley May 28 '09 at 19:02

Also, you can try XSpider

share

Qualys (http://www.qualys.com) provides a service that does this, but as with my comment to Commander Keen, it's not free. Qualys is generally recognized, too, having spoken with several IDS/IPS providers who also provide security monitoring services. The advantage with Qualys is you can get an appliance for inside your network, but you can also schedule a scan from one of their devices on the Internet.

There are also solutions like McAfee Secure (formerly HackerSafe) which provide those type of scanning services automatically.

share

Secunia has some more advanced remote and local services but in this case, their free tool PSI thoroughly checks for unpatched software on a consumer level.

share

Qualys offers that (not free), but you can get a free trial:

http://www.qualys.com/products/trials/

There is also a little project that I am developing (free) to look for leaking data on a web site: http://sucuri.net/?page=scan

share

Not the answer you're looking for? Browse other questions tagged or ask your own question.