Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Are there good (and preferrably free) vulnerability scanners for Windows?

Please don't suggest update checkers - I know about Secunia PSI, FileHippo and CNET checker.

Secunia PSI 1.5 used to do exactly what I need, but in latest version it regressed to a mere update checker, and would not report vulnerability unless there is a patch for it (browser extensions show up in secure browsing page, but vulnerabilities of other applications are not shown at all if there is no patch yet). That is not want I need - I would like to know about a problem even if there is no solution yet, so I would avoid using the program, uninstall it, apply workaround, etc.

Is there anything comparable to old PSI?

share|improve this question
nessus might do what you want and it can still be gotten for free with registration. security is going commercial though, so checking all installed applications against CVEs might not be in free applications much... –  hbdgaf Jan 24 '11 at 12:14
nessus is only network scanner, right? –  Michael Jan 25 '11 at 6:16
To all those reading this question: Which products did you evaluate? Which did you end up choosing? –  unforgettableid 23 hours ago

2 Answers 2

Microsoft's Baseline Security Analyzer (Free) is mainly an update/patch checker BUT it does also check for common security misconfigurations so may fit into your toolbag of apps for what you want to do.

share|improve this answer

Nexpose Community Edition might do what you want, although I've never tried it. You can download it for free. But, as Andrew Brooks pointed out in a 2014 IT World Canada article, "each license runs for a year only".

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.