Connect the tools you already use
VulnBeacon brings different types of network evidence into a common review workflow while retaining their source and limitations. An open port, imported scanner alert, and captured flow observation represent different kinds of evidence.
- Nmap
- Run scoped TCP inventory on a Mac or Linux collector, with optional light service probes, or import Nmap XML. The integration uses approved private addresses and selected ports. It does not run arbitrary Nmap flags, NSE scripts, or exploit commands.
- OpenVAS / Greenbone
- Use a Linux collector beside Greenbone to create and start approved scan tasks, monitor progress, request a stop, and import findings and remediation through GMP. A configured scanner, synchronized feeds, and an operator-approved profile are required.
- Nessus
- Import supported Nessus XML reports to review inventory, findings, CVE references, and remediation alongside other assessment evidence. Scan execution and licensing remain in Nessus.
- Wireshark / TShark
- Analyze existing PCAP or PCAPNG files locally for flow metadata using TShark. This integration does not perform live packet capture or upload packet payloads.
Run collection where your network is reachable
On a Mac: use native Nmap collection, optional TShark analysis, and supported report imports. For OpenVAS scan control, use a Linux VM or a separate Linux machine with access to the approved network.
On Linux: run the local collector with the installed tools and permissions it needs. Greenbone connectivity, feed readiness, and the chosen scan profile require operator setup.
In the hosted workspace: import reviewed portable evidence and use reporting and remediation workflows. Hosting VulnBeacon on Railway does not make your LAN reachable from the cloud. The integration does not install a tunnel or automatically upload local results.
A deliberate collection and review workflow
- Choose the collector. Confirm the machine can reach the intended network and that the required scanner is installed and configured.
- Set the scope. Select approved private addresses or CIDRs, exclusions, ports, and the authorization window. Review the selected scanner’s behavior before starting.
- Collect or import. Run supported local checks or import a report from an existing scanner. Incomplete results and unavailable tools remain visible.
- Review and share. Preserve source attribution, investigate imported alerts, and bring approved evidence into security reports and remediation tracking.
Local-scanning questions
Do I need a Linux VM?
For this OpenVAS/Greenbone control integration, yes: use a Linux VM or Linux host. A Mac can run the supported Nmap workflow and import existing reports without a Linux VM.
Are the scanner engines included?
No. Install and configure the scanners separately. Their licenses, feeds, resource requirements, and operating-system support remain governed by their providers.
Can I also scan an internet-facing domain?
Yes. The separate domain and IP security scanner checks approved public-facing assets for certificate, encryption, header, and selected-port observations.