| Vulnerability Database |
| ALTAIR | esCERT-UPC: The UPC University Computer Emergency Response Team | Vulnerability Database and Vulnerability Alerts | Spain | |
| CERIAS Cooperative Vulnerability Database | CERIAS/Purdue University | Vulnerability Database | United States | |
| CERT/CC Vulnerability Notes Database | CERT Coordination Center | Database | United States | |
| Cert-IST Knowledge Base | Cert-IST | Vulnerability Database | France | |
| Cisco Secure Encyclopedia | Cisco Systems | Vulnerability Database | United States | |
| Criston Vulnerability Management | Criston Software | Vulnerabilty Scanner | France | |
| CSI | LEXSI | Vulnerability Database and Notification Service | France | |
| DeepSight Alert Services | Symantec | Vulnerability Alerting Service and Database | United States | |
| DOVES | Computer Security Laboratory, Dept. of Computer Science, UC Davis | Vulnerability Database | United States | |
| DragonSoft Vulnerability Database | DragonSoft Security Associates, Inc. | Online Vulnerabilities and Exposures Database | Taiwan | |
| eTrust Vulnerability Manager | CA | Vulnerability Management | United States | |
| FrSIRT Security Advisories | French Security Incident Response Team (FrSIRT) | Security Advisories, Database and Archives | France | |
| INTRINsec Cit@delle | INTRINsec | Vulnerability Database | France | |
| IP360 Vulnerability Management System | nCircle Network Security, Inc. | Appliance-Based Enterprise-Class Vulnerability Management System | United States | |
| LR Assist | TecForte Sdn Bhd | Online Knowledge Base | Malaysia | |
| MSSecure.XML | Shavlik Technologies, LLC | Patch Data Repository | United States | |
| National Vulnerability Database (NVD) | National Institute of Standards and Technology | Online Vulnerability Database | United States | |
| Network Automation System | Opsware, Inc. | Data Center Automation | United States | |
| Network Box Web Site | Network Box Corporation Ltd. | Vulnerability Database, Security Advisories and Archives | Hong Kong | |
| Open Source Vulnerability Database (OSVDB) | Open Source Vulnerability Database (OSVDB) | Vulnerability Database | United States | |
| Open Vulnerability and Assessment Language (OVAL) Web site | MITRE Corporation | Standard for Describing Vulnerability and Configuration Criteria | United States | |
| PatchAgent | Niscent s.l.r. | Patch Management Tool | Italy | |
| secunia.com - Secunia Vulnerability Database | Secunia | Database and Archive of Alerts and Information About Vulnerabilities | Denmark | |
| SECUREScan | ReddShell Corporation | Vulnerability Assessment and Management Tool | United States | |
| SecurityAlert | SecurityReason | Security Advisories, Database, and Archive | Poland | |
| Security Database Website | Security Database | Web site services | France | |
| SecurityFocus Vulnerability Database | Symantec | Vulnerability Database | United States | |
| SECurity Watch Service [SECWS] | DEVOTEAM Solutions - APOGEE | Notification service (email in HTML and TEXT format, both in French and English) | France | |
| Server Automation System | Opsware, Inc. | Data Center Automation | United States | |
| Shavlik Technologies Website | Shavlik Technologies, LLC | Patch Data WebSite | United States | |
| Sintelli Vulnerability Database | Sintelli Limited | Vulnerability Web Site | United Kingdom | |
| SIOS (Security Intelligence Operation Studio) | Yokogawa Electric Corporation | Free vulnerability information database web site | Japan | |
| SIOS (Security Intelligence Operation Studio) GOLD | Yokogawa Electric Corporation | Commercial vulnerability information database web site | Japan | |
| Symantec Security Response Web site | Symantec | Vulnerability Database, Security Advisories and Archives | United States | |
| ThreatEx | Spirenet Communications | Vulnerability Assessment Appliance and Database | United States | |
| Verletzbarkeits-Datenbank | scip AG | Free Vulnerability Database | Switzerland | |
| Vigil@nce | Silicomp-AQL | Online Vulnerability Database (French) | France | |
| Vulnera | Grupo S21sec Gestión S.A. | Daily Vulnerability Mail Service Based on a Daily Updated Database | Spain | |
| X-Force Database | IBM Internet Security Systems | Vulnerability Database | United States | |
| Security Advisories and Archives |
| Apache Week Web Server | Red Hat | Apache Web Server Vulnerability Database | United States | |
| Apple Product Security | Apple Computer, Inc. | Security Updates for Apple Products | United States | |
| CERT Advisories | CERT Coordination Center | Archives | United States | |
| Cisco Security IntelliShield Alert Manager | Cisco Systems | Security Intelligense Service | United States | |
| Debian Security Advisories | Software in the Public Interest, Inc. | Advisories | United States | |
| FrSIRT Security Advisories | French Security Incident Response Team (FrSIRT) | Security Advisories, Database and Archives | France | |
| FrSIRT Vulnerability Notification Service | French Security Incident Response Team (FrSIRT) | Vulnerability and Exploit Tracking and Alerting Service | France | |
| Gentoo Linux Security Advisories | Gentoo Foundation | Security Advisories | United States | |
| Mandriva Advisories | Mandriva | Linux Operating System Security Advisory Web Site | Canada | |
| Network Box Web Site | Network Box Corporation Ltd. | Vulnerability Database, Security Advisories and Archives | Hong Kong | |
| Open Source Vulnerability Database (OSVDB) | Open Source Vulnerability Database (OSVDB) | Vulnerability Database | United States | |
| Red Hat Security Advisories | Red Hat | Advisory Capability | United States | |
| secunia.com - Secunia Vulnerability Database | Secunia | Database and Archive of Alerts and Information About Vulnerabilities | Denmark | |
| Secunia Vulnerability Tracking Service - Enterprise Edition | Secunia | Enterprise Service for Tracking, Mapping, and Managing Vulnerabilities in Corporate Networks | Denmark | |
| SecurityAlert | SecurityReason | Security Advisories, Database, and Archive | Poland | |
| Security Announcement Service RUS-CERT | RUS-CERT University of Stuttgart | Security Announcement Information Service | Germany | |
| Security Database Website | Security Database | Web site services | France | |
| SecurityTracker | SecurityTracker | Vulnerability Alerts | United States | |
| Symantec Security Response Web site | Symantec | Vulnerability Database, Security Advisories and Archives | United States | |
| The Opsware Network | Opsware, Inc. | Internet Community Portal and Subscription Service | United States | |
| Threat Intelligence | SecureWorks/LURHQ | Security Intelligence Service | United States | |
| X-Force Alerts and Advisories | IBM Internet Security Systems | Alerts & Advisories Archive | United States | |
| Vulnerability Notification Service |
| Archer Threat Management | Archer Technologies | Threat Management | United States | |
| Cassandra | CERIAS/Purdue University | Profiled Search Tool of Vulnerability Database | United States | |
| Cisco Security IntelliShield Alert Manager | Cisco Systems | Security Intelligense Service | United States | |
| CSI | LEXSI | Vulnerability Database and Notification Service | France | |
| Debian Security Advisories | Software in the Public Interest, Inc. | Advisories | United States | |
| DeepSight Alert Services | Symantec | Vulnerability Alerting Service and Database | United States | |
| DragonSoft Vulnerability Database | DragonSoft Security Associates, Inc. | Online Vulnerabilities and Exposures Database | Taiwan | |
| Foresight | Cubico Solutions CC | Continuous Risk Analysis Solution | South Africa | |
| FrSIRT Vulnerability Notification Service | French Security Incident Response Team (FrSIRT) | Vulnerability and Exploit Tracking and Alerting Service | France | |
| )pallas( | scip AG | Vulnerability Consulting Service | Switzerland | |
| PatchAdvisor Alert! | PatchAdvisor, Inc. | Patch Management Vulnerability Notification Service and Database | United States | |
| PatchAdvisor Flash! | PatchAdvisor, Inc. | Patch Management Vulnerability Notification Service for Small Businesses | United States | |
| PatchAdvisor Source | PatchAdvisor, Inc. | Historical and Current Patch Management Vulnerability Notification Service in XML Format | United States | |
| Secunia Enterprise Security Manager | Secunia | Enterprise Tool for Tracking, Mapping, and Managing Vulnerabilities in Corporate Networks | Denmark | |
| Secunia Enterprise Security Manager - Server Edition | Secunia | Enterprise Tool for Tracking, Mapping, and Managing Vulnerabilities in Corporate Servers | Denmark | |
| Secunia Security Manager | Secunia | Tool for Tracking, Mapping, and Managing Vulnerabilities in Corporate Networks | Denmark | |
| Secunia Vulnerability Tracking Service - Enterprise Edition | Secunia | Enterprise Service for Tracking, Mapping, and Managing Vulnerabilities in Corporate Networks | Denmark | |
| Security Announcement Service RUS-CERT | RUS-CERT University of Stuttgart | Security Announcement Information Service | Germany | |
| SECurity Watch Service [SECWS] | DEVOTEAM Solutions - APOGEE | Notification service (email in HTML and TEXT format, both in French and English) | France | |
| Sintelli Alert! | Sintelli Limited | Vulnerability Alert Service | United Kingdom | |
| The Opsware Network | Opsware, Inc. | Internet Community Portal and Subscription Service | United States | |
| ThreatGuard Traveler | ThreatGuard, Inc. | Continuous Security Auditing and Compliance Management for Service Providers | United States | |
| ThreatGuard Vulnerability Management System | ThreatGuard, Inc. | Continuous Security Auditing and Compliance Management | United States | |
| TraceAlert | TraceSecurity, Inc. | Vulnerability and Malicious Code Alert Service | United States | |
| TruSecure IntelliSHIELD Early Warning System (EWS) | TruSecure Corporation | Integrated Asset Intelligence-Based Threat Management Service | United States | |
| Vulnera | Grupo S21sec Gestión S.A. | Daily Vulnerability Mail Service Based on a Daily Updated Database | Spain | |
| Xacta IA Manager | Xacta Corporation | Vulnerability Assessment and Remediation | United States | |
| Vulnerability Assessment and Remediation |
| AppDetective for IBM DB2 | Application Security, Inc. | Database Vulnerability Assessment Tool | United States | |
| AppDetective for Lotus Domino | Application Security, Inc. | Database Vulnerability Assessment Tool | United States | |
| AppDetective for Microsoft SQL Server | Application Security, Inc. | Database Vulnerability Assessment Tool | United States | |
| AppDetective for MySQL | Application Security, Inc. | Database Vulnerability Assessment Tool | United States | |
| AppDetective for Oracle | Application Security, Inc. | Database Vulnerability Assessment Tool | United States | |
| AppDetective for Oracle Application Server | Application Security, Inc. | Application Vulnerability Assessment Tool | United States | |
| AppDetective for Sybase | Application Security, Inc. | Database Vulnerability Assessment Tool | United States | |
| AppDetective for Web Applications | Application Security, Inc. | Web Application Vulnerability Assessment Tool | United States | |
| AppScan | Watchfire Corporation | Application Security Assessment Tool | United States | |
| AppSentry | Integrigy Corporation | Vulnerability Assessment Tool | United States | |
| Assuria Auditor | Assuria Limited | Vulnerability Assessment and Remediation | United Kingdom | |
| Attack Tool Kit (ATK) | Computec.ch | Security Auditing and Penetration Testing | Switzerland | |
| AuditPro for SQL Server | NII Consulting | Vulnerability Assessment Tool | India | |
| AURORA RSAS | NSFOCUS Information Technology Co., Ltd. | Vulnerability Assessment Tool | P.R. China | |
| Automated Scanning Appliance | Beyond Security Ltd. | Automated Vulnerabilities Scanner | Israel | |
| BigFix Enterprise Suite | BigFix, Inc. | Vulnerability and Security Configuration Management Suite | United States | |
| bv-Control for Internet Security Software | BindView Corporation | Network Vulnerability Assessment Tool | United States | |
| C5 Enterprise Vulnerability Management (EVM) Suite | Secure Elements, Incorporated | Automated Vulnerability Remediation | United States | |
| Cenzic Hailstorm | Cenzic, Inc. | Application Security Assessment Tool | United States | |
| CORE IMPACT | Core Security Technologies | Automated Penetration Testing | United States | |
| Criston Vulnerability Management | Criston Software | Vulnerabilty Scanner | France | |
| Cybervision Vulnerability Assessment and Mangement System | Beijing Venus Information Security Technology, Inc. | Vulnerability Scanner | P.R. China | |
| DragonSoft Secure Scanner | DragonSoft Security Associates, Inc. | Vulnerabilities and Exposures Assessment Software | Taiwan | |
| eTrust Policy Compliance | CA | Configuration Management, Risk Assessment, and Policy Compliance | United States | |
| eTrust Vulnerability Manager | CA | Vulnerability Management | United States | |
| FusionVM Enterprise System | Critical Watch | Appliance-Based Managed Service | United States | |
| FusionVM Managed Service | Critical Watch | Appliance-Based Managed Service | United States | |
| GFI LANguard Network Security Scanner | GFI Software Ltd. | Network Vulnerability Assessment & Remediation Product | United States | |
| HACKER FREE | Xentinel Digital Security, Inc. | Remote Vulnerability Assessment | United States | |
| HACKER SAFE Certification | ScanAlert, Inc. | Security Auditing and Certification | United States | |
| Internet Scanner | IBM Internet Security Systems | Vulnerability Assessment Tool | United States | |
| Internet Security Ranger, ISRanger | China National Computer Software & Technology Service Corporation (CSS) | Vulnerability Assessment Tool | P.R. China | |
| IP360 Vulnerability Management System | nCircle Network Security, Inc. | Appliance-Based Enterprise-Class Vulnerability Management System | United States | |
| ipLegion/intraLegion | E*MAZE Networks S.p.A. | Internet/Intranet Vulnerability Scanner | Italy | |
| LANDesk Patch Manager | LANDesk Software Inc. | Patch Management System | United States | |
| LANDesk Security Suite | LANDesk Software Inc. | Active Endpoint Security Management | United States | |
| LANPATROL | Network Security Systems | Vulnerability Testing Appliance | United States | |
| ManageEngine Security Manager Plus | AdventNet, Inc. | Vulnerability Management Software for Windows and Linux Systems | India | |
| McAfee Foundstone Appliances | McAfee, Inc. | Vulnerability Assessment Appliance | United States | |
| McAfee Foundstone Enterprise | McAfee, Inc. | Vulnerability Management and Risk Mitigation | United States | |
| McAfee Hercules Policy Auditor | McAfee, Inc. | Automated Vulnerability Remediation | United States | |
| McAfee Hercules Remediation Manager | McAfee, Inc. | Automated Vulnerability Remediation | United States | |
| McAfee Preventsys Compliance Auditor | McAfee, Inc. | Automated Audit and Policy Assurance System | United States | |
| McAfee Preventsys Risk Analyzer | McAfee, Inc. | Automated Audit and Policy Assurance System | United States | |
| mySSE for Web (Online PC Vulnerability Assessment Service) | NileSOFT Ltd. | Online PC Vulnerability Assessment Service | Korea | |
| NeoScanner@ESM for Network | Inzen | Vulnerability Assessment Tool | Korea | |
| NeoScanner@ESM for System | Inzen | Host Vulnerability Assessment Tool | Korea | |
| Nessus 3 Security Scanner | Tenable Network Security Inc. | Vulnerability, Patch and Configuration Auditing Tool | United States | |
| NetClarity Analyst and Update Service | NetClarity | Vulnerability Assessment Appliance and Update Service For Small Mobile Networks | United States | |
| NetClarity Auditor 128 and Update Service | NetClarity | Vulnerability Assessment Appliance and Update Service For Small Mobile Networks | United States | |
| NetClarity Auditor Enterprise and Update Service | NetClarity | Vulnerability Assessment Appliance and Update Service For Large Networks | United States | |
| NetClarity Auditor XL and Update Service | NetClarity | Vulnerability Assessment Appliance and Update Service For Small to Medium Enterprises | United States | |
| NetIQ Vulnerability Manager | NetIQ | Vulnerability Assessment Tool | United States | |
| Netpower Network Security Assessment System | Beijing Netpower Technologies Inc. | Vulnerability Assessment Tool | P. R. China | |
| netSense | Gazos Creek Incorporated | Comprehensive and Continuous Network Security (VA, IDS) on Embedded Devices | United States | |
| Network Automation System | Opsware, Inc. | Data Center Automation | United States | |
| NeXpose | Rapid 7, Inc. | Vulnerability Assessment Tool | United States | |
| N-Stealth | N-Stalker, Inc. | Vulnerability Assessment Tool | Brazil | |
| NX Enterprise | NX Security | Vulnerability Assessment Service | Brazil | |
| NX Express | NX Security | Vulnerability Assessment Service | Brazil | |
| NX Express for Web Applications | NX Security | Vulnerability Assessment Service | Brazil | |
| Passive Vulnerability Scanner | Tenable Network Security Inc. | Passive Network Monitor | United States | |
| PatchAdvisor Enterprise | PatchAdvisor, Inc. | Patch Management | United States | |
| PatchLink Update | Lumension Security, Inc. | Enterprise-Wide Patch Management and Vulnerability Remediation | United States | |
| PatchPoint System | Blue Lane Technologies Inc. | Inline Security Patch Proxy | United States | |
| Proventia Enterprise Scanner | IBM Internet Security Systems | Vulnerability Management Assessment System | United States | |
| Qualys Browser Check | Qualys | Browser Vulnerability Assessment | United States | |
| QualysGuard Consultant | Qualys | Network and Application Vulnerability Assessment Platform For Professional Services Organizations | United States | |
| QualysGuard Enterprise | Qualys | Network and Application Vulnerability Assessment Platform For Large Distributed Organizations | United States | |
| QualysGuard Express | Qualys | Network and Application Vulnerability Assessment Platform For Small To Medium Sized Organizations | United States | |
| QualysGuard MSP | Qualys | Network and Application Vulnerability Assessment Platform For Managed Service Providers | United States | |
| QualysGuard SANS/FBI Top 20 Vulnerabilities Scanner | Qualys | Free Vulnerability Assessment Service | United States | |
| Retina Network Security Scanner | eEye Digital Security | Vulnerability Assessment Tool | United States | |
| Risk Management System (RMS) | SecureInfo Corporation | Compliance Framework Tool | United States | |
| RJ-iTop Network Vulnerability Scanner System | FuJian RongJi Software Company, Ltd | Vulnerability Assessment Tool | P.R. China | |
| RV10 (Real-Time Top Ten Vulnerabilities) | Qualys | Free scan service of the the ten most critical and prevalent security vulnerabilities | United States | |
| SAINTbox | SAINT Corporation | Network Vulnerability Scanning Appliance | United States | |
| SAINTmanager | SAINT Corporation | Network Vulnerability Assessment Management Console | United States | |
| ScanDo | KaVaDo Inc. | Vulnerability Assessment Scanner | United States | |
| Scan-edge | e-Project s.r.l. | Vulnerability Assessment and Remediation Service | United States | |
| SecPoint Penetrator | SecPoint | Vulnerability Assessment and Penetration Testing Appliance | Denmark | |
| Secuguard NSE (Network Security Explorer) | NileSOFT Ltd. | Network based Vulnerability Assessment Tool | Korea | |
| Secuguard SSE (System Security Explorer) | NileSOFT Ltd. | Host based Vulnerability Assessment Tool | Korea | |
| Secunia Enterprise Security Manager | Secunia | Enterprise Tool for Tracking, Mapping, and Managing Vulnerabilities in Corporate Networks | Denmark | |
| Secunia Enterprise Security Manager - Server Edition | Secunia | Enterprise Tool for Tracking, Mapping, and Managing Vulnerabilities in Corporate Servers | Denmark | |
| Secunia Security Manager | Secunia | Tool for Tracking, Mapping, and Managing Vulnerabilities in Corporate Networks | Denmark | |
| SecureCentral ScanFi | AdventNet, Inc. | Vulnerability Management Software for Windows and Linux Systems | India | |
| SECUREScan | ReddShell Corporation | Vulnerability Assessment and Management Tool | United States | |
| SecureScout NX | netVigilance, Inc. | Single User Network-Based Vulnerability Assessment Tool | United States | |
| SecureScout SP | netVigilance, Inc. | Enterprise Network-Based Vulnerability Assessment Tool | United States | |
| Security Administrator's Integrated Network Tool (SAINT) | SAINT Corporation | Vulnerability Assessment Tool | United States | |
| Security Auditor's Research Assistant (SARA) | Advanced Research Corporation | Vulnerability Assessment Tool | United States | |
| Security Center | Tenable Network Security Inc. | Enterprise Security Management System | United States | |
| Security Risk Assessment | Information Risk Management Plc | Security Risk Assessment Service | United Kingdom | |
| Server Automation System | Opsware, Inc. | Data Center Automation | United States | |
| Shavlik Technologies HFNetChkPro | Shavlik Technologies, LLC | Patch Management | United States | |
| Skybox View | Skybox Security Inc. | Exposure Risk Management Solution | Israel | |
| Sourcefire Intelligent Security Monitoring System | Sourcefire, Inc. | Integrated Security Monitoring Infrastructure for Identifying and Protecting Against Network Threats | United States | |
| STAT Scanner | Harris Corporation | Assessment Tool | United States | |
| StillSecure VAM | StillSecure | Vulnerability Management System | United States | |
| Sunbelt Network Security Inspector | Sunbelt Software | Vulnerability Assessment Tool | United States | |
| Symantec NetRecon | Symantec | Network Vulnerability Assessment | United States | |
| Symantec Vulnerability Assessment | Symantec | Network Intrusion Detection | United States | |
| System Scanner | IBM Internet Security Systems | Host-Based Vulnerability Assessment Tool | United States | |
| ThreatGuard Traveler | ThreatGuard, Inc. | Continuous Security Auditing and Compliance Management for Service Providers | United States | |
| ThreatGuard Vulnerability Management System | ThreatGuard, Inc. | Continuous Security Auditing and Compliance Management | United States | |
| TraceAssess | TraceSecurity, Inc. | Vulnerability Lifecycle Management Utility | United States | |
| Trend Micro Vulnerability Assessment | Trend Micro, Inc. | Vulnerability Assessment Product with Virus Info Association | Japan | |
| TrustSight Security Scanner | Syhunt, Inf. Ltd. | Application Security Scanner | Brazil | |
| Visionael Security Audit | Visionael | Vulnerability Assessment and Remediation Tool | United States | |
| VLAD the Scanner | BindView Corporation | Free Open Source Common Vulnerabilities Assessment Tool | United States | |
| WebInspect | SPI Dynamics | Web Assessment | United States | |
| What Changed? | Prism Microsystems, Inc. | Change and Vulnerability Assessment Tool | United States | |
| Xacta IA Manager | Xacta Corporation | Vulnerability Assessment and Remediation | United States | |
| Vulnerability Assessment Service |
| ATTAKA | Openware | On Demand Vulnerability Management and Assessment Service | Argentina | |
| Automated Scanning Service - External Scanning | Beyond Security Ltd. | Automated Vulnerabilities Scanning Service | Israel | |
| Automated Scanning Service - Product Audits | Beyond Security Ltd. | Automated Vulnerabilities Scanner For Product Audits | Israel | |
| Automated Scanning Service - Service Provider Platform | Beyond Security Ltd. | Automated Vulnerabilities Scanner Platform For Service Providers | Israel | |
| BigFix Enterprise Suite | BigFix, Inc. | Vulnerability and Security Configuration Management Suite | United States | |
| Catbird Shield | Catbird | Security Service | United States | |
| Cenzic ClickToSecure | Cenzic, Inc. | Application Security Assessment Service | United States | |
| CORE IMPACT | Core Security Technologies | Automated Penetration Testing | United States | |
| EdgeSecure | Edgeos, Inc. | Network Security Analysis Service | United States | |
| Foresight | Cubico Solutions CC | Continuous Risk Analysis Solution | South Africa | |
| FusionVM Enterprise System | Critical Watch | Appliance-Based Managed Service | United States | |
| FusionVM Managed Service | Critical Watch | Appliance-Based Managed Service | United States | |
| HACKER FREE | Xentinel Digital Security, Inc. | Remote Vulnerability Assessment | United States | |
| iNETPATROL | Network Security Systems | Vulnerability Testing and Reporting Service | United States | |
| McAfee Foundstone On-Demand Service | McAfee, Inc. | Managed Security Assessment Service | United States | |