GVM (Greenbone Vulnerability Manager)

The Greenbone Vulnerability Manager (GVM) is a modular security auditing tool used for testing remote systems for vulnerabilities that should be fixed. Previously named OpenVAS, it serves as a comprehensive solution for vulnerability assessment in network environments.

This metapackage installs all necessary components including scanners, daemons, and supporting services. It includes utility scripts that automate the setup process, service management, and system readiness checks, making it suitable for security professionals conducting regular vulnerability scans.

GVM operates through a web interface and integrates multiple services like the Greenbone Security Assistant, vulnerability manager daemon, and OpenVAS scanner, enabling detailed reporting and remediation tracking.

GVM manages vulnerability scanning through coordinated services: openvas-scanner for network vulnerability detection, notus-scanner for additional scanning capabilities, gvmd for managing scans and databases, gsad for the web UI at https://127.0.0.1:9392, and ospd-openvas as the scanner wrapper. Setup involves PostgreSQL database creation, certificate generation via gvm-manage-certs, feed updates, and service control through systemd units. The gvm-check-setup script verifies completeness including CA certificates and scanner presence.