Nessus is found in the toolbox of well-funded and cash-strapped security organizations alike. Nessus tests all aspects of a target including the operating system, ports, services, and applications. Available via open source or commercial subscription, the difference is frequency of vulnerability updates -- up-to-the-minute or seven days.