Does TridentStack Control replace a network scanner?

No. TridentStack Control detects vulnerabilities on managed endpoints from software inventory. It does not scan networks, unauthenticated hosts, network devices, hypervisors, web applications, containers, or cloud configurations. Keep Greenbone for network coverage, or run both and use TridentStack Control for endpoint detection and patching.

Does OpenVAS have endpoint agents?

OPENVAS SCAN has Windows and Linux agents in technology preview. Greenbone says the feature is not intended for production use. TridentStack Control provides an agent-based endpoint scanner.

Can Greenbone deploy patches?

Greenbone provides remediation guidance and tickets, and recommends central patch tools such as WSUS, SCCM, or Ansible. TridentStack Control includes endpoint operating system and third-party application patch deployment.

Is Greenbone Community Edition the same as OPENVAS FREE?

No. Community Edition is a self-managed open-source scanning and management framework. OPENVAS FREE is a separate restricted virtual appliance using the Community Feed. Appliance restrictions apply only to that product, not to self-managed Community Edition.

What Greenbone pricing is public?

OPENVAS BASIC is listed at EUR 2,524 per year and advertises a 14-day free trial. OPENVAS SCAN is quote-based and its current licensing specifies an asset quota.

Compare

TridentStack Control vs OpenVAS

OpenVAS is the open-source scanner behind Greenbone, which also sells appliances, enterprise feeds and cloud services; the free Community Edition is software you host yourself. Greenbone's endpoint agent is still a technology preview. TridentStack Control is hosted, runs a production agent on Windows, macOS and Linux, and both finds and installs fixes: 200 endpoints free forever, then $5 per endpoint per month. Choose OpenVAS for network scanning you run in-house.

Get Started Free See TridentStack Control

At a glance: TridentStack Control vs OpenVAS

Capability	TridentStack Control	OpenVAS
Free offer Greenbone offers a free scanner that you host and maintain, including its database and feed updates. OPENVAS FREE is a separate, restricted virtual appliance.	200 endpoints free forever, commercial use allowed	Community Edition is free software you host
Endpoint agent OPENVAS SCAN has Windows and Linux agents in technology preview, which Greenbone says are not intended for production use.	Yes	Preview (OPENVAS SCAN)
Network and unauthenticated scanning OpenVAS supports authenticated and unauthenticated network scans. TridentStack Control is an endpoint scanner and does not replace that coverage.	No	Yes
Network devices and web application scanning Greenbone assesses network devices. SCAN can detect known web-application vulnerabilities covered by feed tests, but Greenbone says it is not a web application security scanner.	No	Partial
CVSS / EPSS / CISA KEV prioritization Greenbone's Enterprise Feed adds EPSS-based prioritization; the free Community Feed does not include it.	Yes	CVSS, EPSS (Enterprise Feed)
Patch deployment Greenbone provides remediation guidance and tickets, and recommends central patch tools such as WSUS, SCCM, or Ansible; Greenbone recommends WSUS, SCCM, or Ansible for patch changes.	Yes	See note
Third-party application patching Greenbone recommends central patch tools such as WSUS, SCCM, or Ansible; Greenbone recommends WSUS, SCCM, or Ansible for patch changes.	Yes	See note
DISA STIG configuration scoring Greenbone Enterprise Feed includes industry benchmark checks. TridentStack Control scores DISA STIGs and Microsoft Security Baselines.	Yes	Industry benchmark checks (Enterprise Feed)
Hosted, nothing to run Greenbone Community Edition and SCAN appliances are self-managed. Greenbone Cloud Service is hosted, with gateway components for internal targets.	Yes	Partial
MSP multi-tenancy Greenbone runs an MSSP program, and Greenbone Cloud Service includes customer management for service providers.	Yes	MSSP program
Published pricing OPENVAS BASIC is EUR 2,524 per year. OPENVAS SCAN is priced by quote.	$5 per endpoint per month after 200 free	Partial
Custom scripts on endpoints OpenVAS runs vulnerability tests against scan targets. Greenbone provides remediation guidance and tickets and recommends central tools such as WSUS, SCCM, or Ansible for changes.	yes (Windows, macOS, Linux)	vulnerability tests only
Script remediation when a check fails Greenbone recommends central tools such as WSUS, SCCM, or Ansible for patch changes. TridentStack Control can run a fix script from an Endpoint Checks policy on Windows and Linux, then rerun the checks.	yes (Windows, Linux)	Not documented

Where OpenVAS is genuinely better

Honest about where the competition wins. If your fleet looks like the cases below, OpenVAS is the right answer.

·OpenVAS supports authenticated and unauthenticated network scanning. Greenbone's broader enterprise feed covers servers, workstations, network devices, IoT, and selected industrial components; TridentStack Control does not scan networks or these non-endpoint targets.
·Greenbone Community Edition is open-source software and its scanner is free to use. Greenbone also offers self-managed commercial appliances for organizations that require operation within their own environment, including air-gapped deployments.
·Greenbone provides remediation recommendations and tickets, and points customers to central patch tools such as WSUS, SCCM, or Ansible.
·OPENVAS SCAN supports Windows and Linux endpoint agents in technology preview, with no separate agent fee under Greenbone's new licensing model, where agents count against your asset quota. Greenbone says the preview is not intended for production use.
·OPENVAS BASIC lists EUR 2,524 per year. Its page displays a 14-day trial offer while also saying no trial is needed; confirm current availability. OPENVAS SCAN is quote-based; its current licensing defines an asset quota.

Where TridentStack Control is genuinely better

The capabilities that don't exist in OpenVAS or only exist as separate paid SKUs.

·The first 200 endpoints are free forever for commercial use, hosted for you, with every TridentStack Control feature included. Greenbone Community Edition is free software you install, update, and operate yourself.
·TridentStack Control continuously detects endpoint vulnerabilities from software inventory, rather than relying only on scheduled network scans; the preview agent collects software inventory into an SBOM for Skiron vulnerability evaluation.
·Endpoint operating system and third-party application patch deployment is included in the same price as vulnerability detection. Greenbone provides remediation guidance and tracking, and recommends external patch tools.
·DISA STIG scoring is included for supported Windows, macOS, Ubuntu 20.04, 22.04, and 24.04 LTS, and RHEL 8 and 9 endpoints, plus Microsoft Security Baselines for Windows.
·TridentStack Control is hosted, uses outbound agent connections on port 443, includes MSP multi-tenancy, and provides vendor email support on every endpoint, including free endpoints.
·Findings carry CVSS, EPSS, and CISA KEV status and are grouped by the update that fixes them, with exception expiry and an audit trail.
·Custom Scripts in the same product and price: PowerShell, batch, and shell scripts on Windows, macOS, and Linux, run on demand, at startup, at user login, on an interval, or at a set time, targeted by tag, with every run's output in Run History.
·A check-to-fix loop on one agent: an Endpoint Checks policy finds the problem, its linked script fixes it, the checks run again, and the result counts toward the endpoint health score, on Windows and Linux.

Pricing at your fleet size

Drag the slider to your fleet size. The math is the math.

Endpoints250

TridentStack Control

$250

per month

OpenVAS

Pricing not directly comparable

OpenVAS pricing depends on bundles, server licenses, or admin overhead.

How to migrate from OpenVAS to TridentStack Control

A plain-language sequence. Skip the steps that don't apply to your fleet.

1
Keep Greenbone for network and device coverage
TridentStack Control does not scan networks, unauthenticated hosts, network devices, IoT, or web applications. Keep Greenbone for those targets, or run both products if you want continuous endpoint inventory-based detection.
2
Pilot the endpoint agent alongside existing scans
Install TridentStack Control on a small group of supported endpoints and compare its inventory-based findings with Greenbone results for the same machines. OPENVAS SCAN's agent feature remains a technology preview, so verify its support status before relying on it in production.
3
Compare detection and remediation workflows
Review CVSS, EPSS, and CISA KEV status alongside Greenbone's feed-specific signals. Keep network findings and recommendations in Greenbone, and evaluate TridentStack Control's findings grouped by the update that fixes them.
4
Move endpoint patching into deployment rings
Use TridentStack Control's included operating system and third-party application patching with approval rules and deployment rings. Continue using your current patch tooling for network or non-endpoint assets.

Frequently asked questions about OpenVAS and TridentStack Control

Log 01
Log 01
Does TridentStack Control replace a network scanner?
No. TridentStack Control detects vulnerabilities on managed endpoints from software inventory. It does not scan networks, unauthenticated hosts, network devices, hypervisors, web applications, containers, or cloud configurations. Keep Greenbone for network coverage, or run both and use TridentStack Control for endpoint detection and patching.
Log 02
Log 02
Does OpenVAS have endpoint agents?
OPENVAS SCAN has Windows and Linux agents in technology preview. Greenbone says the feature is not intended for production use. TridentStack Control provides an agent-based endpoint scanner.
Log 03
Log 03
Can Greenbone deploy patches?
Greenbone provides remediation guidance and tickets, and recommends central patch tools such as WSUS, SCCM, or Ansible. TridentStack Control includes endpoint operating system and third-party application patch deployment.
Log 04
Log 04
Is Greenbone Community Edition the same as OPENVAS FREE?
No. Community Edition is a self-managed open-source scanning and management framework. OPENVAS FREE is a separate restricted virtual appliance using the Community Feed. Appliance restrictions apply only to that product, not to self-managed Community Edition.
Log 05
Log 05
What Greenbone pricing is public?
OPENVAS BASIC is listed at EUR 2,524 per year and advertises a 14-day free trial. OPENVAS SCAN is quote-based and its current licensing specifies an asset quota.

See your fleet on TridentStack Control

200 endpoints free forever. No credit card required. No sales call required.

Get Started Free Talk to us about migration

See the free patch management and free vulnerability scanning comparison tables.

Compare TridentStack Control against other tools

Every comparison page is fact-checked against vendor documentation and re-verified at least every 90 days.

See all comparisons ->

Sources used to verify this comparison

All OpenVAS pricing, feature, and lifecycle claims on this page were verified against the sources below on 2026-11-03. Vendor pricing and capabilities change; if you spot something out of date, let us know.