Nessus vs OWASP Dependency Check

1.1k Views Asked by At

I would like to ask about the difference between Nessus and OWASP Depencence Check. My understanding is that Nessus includes the functionality of Dependency Cherck, Is that right ?

1

There are 1 best solutions below

0
On

Nessus works a little bit different than OWASP DC. OWASP DC looks at your buildfiles and compares them against a database of known vulnerabilites of the used libraries. Nessus does an active scan against a running appplication, network, database, etc.

But depending on the point of view one could say Nessus includes the functionality of OWASP DC as it should find at least the same vulnerabilities as DC. :-)