# OpenVAS: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 26 judge labels across 3 categories by 13 of 14 models. Page: https://www.gane.ai/index/it/vendors/openvas

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Vulnerability management platforms](https://www.gane.ai/index/it/security/vulnerability-management-platforms/index.md) | 6% | 7 | 38% | 21 |
| [Penetration testing as a service](https://www.gane.ai/index/it/security/penetration-testing-as-a-service/index.md) | 0% | 93 | 25% | 4 |
| [Breach and attack simulation](https://www.gane.ai/index/it/security/breach-and-attack-simulation/index.md) | 0% | 45 | 0% | 1 |

## What the models said for it

- "Intruder for SaaS simplicity and Greenbone Community Edition for zero licence cost are the most frequently recommended options" (Muse Glimmer 30B, Vuln management)
- "OpenVAS (Greenbone Community Edition) is the most capable free vulnerability management tool" (Claude Haiku 4.5, Vuln management)
- "Best Free/Open-Source Option ... Completely free and open-source" (Grok 4.20, Vuln management)
- "If your budget is tighter and you have internal Linux‑admin talent, OpenVAS + Greenbone Enterprise can give you solid coverage at essentially no license cost" (MiniMax M2.5, Vuln management)

## And against it

- "Standalone Nessus (without a console), OpenVAS (without Kubelet/KQL integration) | Lacks the "Management" layer" (Qwen 3.7 Flash, Vuln management)
- "Avoid if you need production-grade reliability — use it only for learning or very small lab environments." (DeepSeek V4 Flash, Vuln management)
- "avoid pure scanners (e.g., OpenVAS) as they lack full VM features" (Grok 4.20, Vuln management)
- "open-source scanners often produce high false-positive rates, require heavy manual maintenance, lack enterprise reporting dashboards" (Gemini 3.5 Flash, Vuln management)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 1 | 0 | 1 | 1 | 3 |
| GPT-5.4 mini | 0 | 1 | 0 | 0 | 1 |
| Gemini 3.5 Flash | 0 | 1 | 1 | 1 | 3 |
| Perplexity Sonar | 0 | 1 | 0 | 0 | 1 |
| Grok 4.20 | 1 | 0 | 0 | 1 | 2 |
| Mistral Small | 0 | 1 | 0 | 0 | 1 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 2 | 2 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 2 | 2 |
| Kimi K2 | 0 | 0 | 1 | 2 | 3 |
| GLM 4.7 FlashX | 0 | 1 | 1 | 0 | 2 |
| MiniMax M2.5 | 0 | 3 | 1 | 0 | 4 |
| GPT-6 Luna | 0 | 1 | 0 | 0 | 1 |
| Muse Glimmer 30B | 1 | 0 | 0 | 0 | 1 |

## Sources returned with these answers

The sites and pages cited by the answers that named OpenVAS, from 71 of the 86 answers that named it (only the models that return a source list).

### Domains cited

- g2.com: 24
- softwareadvice.com: 24
- axis-intelligence.com: 23
- linfordco.com: 23
- spotsaas.com: 19
- vicarius.io: 19
- reddit.com: 16
- tenable.com: 15
- techrepublic.com: 14
- intruder.io: 13

### Pages cited

- https://axis-intelligence.com/best-vulnerability-management-tools-tested: 23
- https://linfordco.com/blog/choosing-vulnerability-assessment-tools: 23
- https://spotsaas.com/list/vulnerability-management-software/for-small-business: 18
- https://softwareadvice.com/vulnerability-management/small-business: 16
- https://techrepublic.com/article/top-vulnerability-management-tools: 14
- https://sprinto.com/blog/vulnerability-management-tools: 13
- https://motadata.com/blog/vulnerability-management-tools: 11
- https://softwareadvice.com/vulnerability-management: 11

## In its own words

What OpenVAS's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.

- Positioning: a full-featured vulnerability scanner (https://openvas.org/)

## What it publishes

Every page openvas.org exposes, read 2026-09-29: 2 addresses. By kind, pages and the last 90 days:


## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.