Tenable Nessus

No entries match these filters. Clear filters

1. Tenable Nessus10.12.6 (2026-10-22) Oct 22, 2026 · issue 117

   Nessus 10.12.6 lifts the Amazon Linux restriction on --aws-scanner linking and drops several legacy OS platforms.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Linking a Tenable One Vulnerability Management-managed scanner using the --aws-scanner flag from an AWS-hosted scanner is no longer restricted to Amazon Linux.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Removes support for Windows Server 2012 and 2012 R2, Ubuntu 16.04, RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. and derived distributions version 8 minor versions before 8.10, and macOS 14.
   • Linking a Tenable One Vulnerability Management-managed scanner using the --aws-scanner flag from an AWS-hosted scanner is no longer restricted to Amazon Linux.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !Support for Windows Server 2012 and 2012 R2 is removed — scanners running on those OSes will no longer be supported.
   • !Support for Ubuntu 16.04 is removed.
   • !Support for RHEL and derived distributions version 8 minor versions before 8.10 is removed.
   • !Support for macOS 14 is removed.
2. Tenable Nessus10.12.5 (2026-10-01) Oct 1, 2026 · issue 092

   Manual plugin updates now require a valid Tenable signature file before archives are extracted or loaded; applies to Nessus and Nessus Manager only.

   • Manual plugin updates for Tenable Nessus and Tenable Nessus Manager now require a signature file to process plugin updates (does not affect Tenable Security Center plugin updates, Nessus Manager agent plugin updates, or Nessus application updates).

   1 detail in Everything

   • New supported platform Alma Linux 10 scanner platform support
   └──▷ BREAKING ON UPGRADE

   • !Manual plugin updates for Tenable Nessus and Tenable Nessus Manager now require a valid signature file — plugin archives without one will no longer be extracted or loaded. Tenable Security Center plugin updates, Nessus Manager agent plugin updates, and Nessus application updates are not affected.
3. Tenable Nessus10.12.5 (2026-10-01) Oct 1, 2026 · release notes

   Tenable Nessus 10.12.5 adds Alma Linux 10 support and requires signatures for manual plugin updates.

   • Adds support for Alma Linux 10 as a supported scanning platform.
   • Requires a valid Tenable signature file to process manual plugin updates for Tenable Nessus and Tenable Nessus Manager.

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Manual plugin updates for Tenable Nessus and Tenable Nessus Manager now fail if the uploaded signature file is missing or invalid.
4. 10.12.5 Oct 1, 2026 · release notes

   Nessus 10.12.5 adds Alma Linux 10 platform support and requires signed plugin updates for Nessus/Nessus Manager.

   • Added support for Alma Linux 10 as a supported scanner platform.
   • Manual plugin updates for Tenable Nessus and Tenable Nessus Manager now require a signature file to process updates.

   2 details in Everything

5. Tenable Nessus10.12.0 (2026-04-23) seen Jul 13, 2026 · issue 014

   Nessus 10.12.0 adds drag-and-drop UI, Sensor Proxy support, FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments.-140.3, OpenSSL 3.5, ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead., and a new --scan-zones CLI parameter.

   └──▷ TRY IT
   Link a managed Nessus scanner to Tenable Security Center and assign it to specific scan zones at link time — useful when deploying scanners into segmented network zones.
   copy

   $ nessuscli link --host=<sc_host> --key=<link_key> --scan-zones=<zone_id>

   Deploy a Nessus container and assign scan zones via environment variable so the scanner registers to the correct Security Center zone without manual post-link configuration.
   copy

   $ docker run -e SCAN_ZONES=<zone_id> -e LINKING_KEY=<link_key> -e SC_HOST=<sc_host> tenable/nessus

   Import a .nessus results file into Nessus without using the file picker — drag the file from your desktop and drop it anywhere in the Nessus UI.
   📍In the Nessus UI, drag a .nessus file from your local file manager and drop it directly onto the Nessus scans page to import it.
   • Adds drag-and-drop scan organization: move existing scans into folders directly from the list view in the modernized UI.
   • Enables drag-and-drop .nessus file import: drop scan files from your local machine directly into the Nessus UI.
   • Adds support for OpenSSL 3.5.
   • Adds support for FIPS-140.3 compliance mode.
   • Enables Sensor Proxy connectivity from Nessus to Tenable Security Center 6.9.0 and later.

   +4 more show less

   • Adds --scan-zones parameter to nessuscli link and SCAN_ZONES environment variable to the Docker run command for assigning scan zones when linking managed Nessus scanners to Tenable Security Center.
   • Adds platform support for Windows environments running on ARM64.
   • Breaking change: API file download endpoints now require session-token authentication; previously unauthenticated requests will fail.
   • Breaking change: API access to plugin rules is removed for users with Basic permissions.

   9 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Unauthenticated requests to download files from Tenable Nessus are no longer permitted; those requests must now be authenticated with a session token.
   • !API access to plugin rules has been removed for users with Basic permissions.
6. Tenable Nessus10.12.1 (2026-06-25) seen Jul 13, 2026 · issue 014

   Nessus 10.12.1 adds variable support for custom audit files when scanning from Tenable Security Center.

7. Tenable Nessus10.12.1 (2026-06-25) Jun 25, 2026 · release notes

   Tenable Nessus 10.12.1 adds variable support for custom audit files in Security Center scans and FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. scanner compatibility.

   └──▷ HOW TO FIND IT
   Ensure legacy China-based scanner deployments can reach Tenable One VM post-upgrade by updating the endpoint.
   📍Update connection settings on mainland China scanners to use sensor.cloud.tenablecloud.cn instead of sensor.cloud.tenable.com
   Enable parameterized custom audit files in Security Center scans.
   📍In Tenable Security Center, provide variables to custom audit files when scanning
   • Adds the ability to provide variables to custom audit files when scanning from Tenable Security Center
   • Expands support so Tenable One Vulnerability Management FedRAMP environments accept Tenable Nessus scanners versions 10.5.0 and later

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Scanners, Agents, Web App Scanning scanners, or NNM located in mainland China must now connect through sensor.cloud.tenablecloud.cn instead of sensor.cloud.tenable.com.
8. 10.12.1 Jun 25, 2026 · release notes

   Adds support for providing variables to custom audit files when scanning from Tenable Security Center.

9. Tenable Nessus10.12.0 (2026-04-23) Apr 23, 2026 · release notes

   New --scan-zones flag for nessuscli link, drag-and-drop UI for scans/files, ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. Windows support

   • Adds --scan-zones parameter to the nessuscli link command and SCAN_ZONES environment variable to the Docker run command for linking managed Tenable Nessus scanners to Tenable Security Center.
   • Enables drag-and-drop functionality to move existing scans into folders or directories within the Tenable Nessus user interface.
   • Enables drag-and-drop import of scan files (e.g., .nessus) from a local computer directly into Tenable Nessus.
   • Adds support for Windows environments running on ARM64.
   • Adds support for Sensor Proxy to connect to Tenable Security Center versions 6.9.0 and later.

   5 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Unauthenticated requests to download files from Tenable Nessus now fail; you must authenticate those requests with a session token.
   • !API access to plugin rules is removed for users with Basic permissions.
10. 10.12.0 Apr 23, 2026 · release notes

    Tenable Nessus 10.12.0 adds drag-and-drop scan management, FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments.-140.3 support, and SCAN_ZONES config for Security Center integration

    • Adds drag-and-drop functionality to move existing scans into folders or directories within the Tenable Nessus user interface.
    • Enables importing .nessus scan files by dragging them from a local computer directly into the Tenable Nessus UI.
    • Added --scan-zones parameter to the nessuscli link command for specifying zones when linking scanners to Tenable Security Center.
    • Added SCAN_ZONES environment variable support in the Docker run command for specifying zones during managed scanner linkage.
    • Added support for OpenSSL 3.5, enabling updated cryptographic capabilities within Nessus scans.

    +1 more show less

    • Added FIPS-140.3 compliance support, allowing Nessus to operate under stricter federal cryptographic standards.

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Unauthenticated API requests to download files must now be authenticated with a session token; previously working unauthenticated downloads will fail.
    • !API access to plugin rules is removed for users with Basic permissions.
11. 10.11.1 Dec 15, 2025 · release notes

    Tenable Nessus Manager now generates plugin databases for RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence.-derived distributions.

12. 10.11.0 Nov 20, 2025 · release notes

    Introduces Nessus Essentials Plus tier with 20-target scanning and real-time plugin updates

    • Adds Nessus Essentials Plus subscription tier enabling 20 scannable targets for verified students/educators and paid users
    • Enables real-time plugin updates for Nessus Essentials Plus subscribers

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Nessus Essentials scannable target limit reduced from 16 to 5
    • !Reporting and exporting disabled in Nessus Essentials
    • !Nessus Essentials subscription term changed to monthly
    • !Plugin updates delayed by 30 days for Nessus Essentials
    • !Data not saved at end of Nessus Essentials subscription term unless upgraded
    • !Removed support for macOS 13
    • !Removed support for 32-bit Windows operating systems
13. 10.10.0 Oct 14, 2025 · release notes

    Nessus 10.10 adds global scan timeout, agent CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. limits via profiles, and an API to export all Tenable Agent data.

    • Added a global timeout setting to define the maximum duration for a host scan
    • Added support for upcoming CPU resource limit setting for Tenable Agents, configurable via agent profiles in Tenable Nessus Manager

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Disabled the ability to export scan data and audit files in trial versions of Tenable Nessus
    • !Removed Terrascan from Tenable Nessus Essentials, Professional, Expert, and trials
14. 10.8.6 Sep 24, 2025 · release notes

    Tenable Nessus 10.8.6 adds macOS 26 support and FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one./China connectivity updates

    • Adds macOS 26 (Tahoe) platform support for scanners

    1 detail in Everything

15. 10.9.2 Jul 30, 2025 · release notes

    Tenable Nessus 10.9.2 adds FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. support and China-specific connector URL for Tenable One Vulnerability Management.

    • Tenable Nessus, Tenable Agents, Tenable One Web App Scanning scanners, and Tenable Network Monitors in mainland China can connect to Tenable One via sensor.cloud.tenablecloud.cn

    1 detail in Everything

16. 10.9.0 Jun 30, 2025 · release notes

    Nessus 10.9.0 adds triggered agent scans, offline web app scanning, and nessuscli optimization.

    └──▷ TRY IT
    Optimize the size and structure of the global configuration database on your scanner.
    copy

    $ nessuscli system --config-optimization

    • Adds support for triggered agent scans via Tenable Nessus Manager
    • Enables web application scanning in air-gapped/offline environments
    • Adds ability to declare agent versions for Manager agent profiles in offline mode
    • Reports safe mode status from agents to Tenable Nessus Manager
    • Introduces nessuscli system --config-optimization command to optimize the global configuration database

    +1 more show less

    • Adds --fedcloud parameter to link scanners to FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. environments

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The default debug report and backup file formats are changed from tar.gz to zip.
17. 10.8.2 Aug 15, 2024 · release notes

    Tenable Nessus 10.8.2 adds FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. environment support for Tenable One scanners and updates China endpoint connectivity.

    • Adds support for Tenable Nessus versions 10.5.0 and later to connect with Tenable One Vulnerability Management in FedRAMP environments

    1 detail in Everything

18. 10.8.0 Jul 30, 2024 · release notes

    Nessus 10.8 adds CVSSv4/EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. scoring, Agent Profiles in Manager, offline mode, scan type decoration, IMDSv2 support

    • Adds CVSSv4 and EPSS scoring for vulnerability findings with view and filter capabilities
    • Adds the Sensors > Agent Profiles menu in Tenable Nessus Manager to create and manage agent profiles for linking agents and applying product versions
    • Adds an offline mode for Tenable Nessus Professional and Expert users with limited internet connectivity
    • Decorates scan results with a scan type field to differentiate scans
    • Adds import-certs CLI support for importing server chains

    +2 more show less

    • Adds support for importing unencrypted scan databases
    • Adds IMDSv2 support for BYOL scanners in AWS

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Support is removed for Red Hat Enterprise Linux 6, Debian 10, Ubuntu 14.04, and FreeBSD.
    • !The hostname package is now a dependency for Tenable Nessus rpm installations; the hostname package must be installed if not present.
    • !Tenable Nessus tracks WAS licenses against only the hostname and port instead of the full URL.
19. 10.7.0 Feb 6, 2024 · release notes

    Nessus 10.7 adds Chinese plugin detail locales, dynamic scan UI tooltips, and new platform support.

    • Adds Japanese, Simplified Chinese, and Traditional Chinese as available languages for plugin detail views
    • Adds dynamic tooltips to the advanced scan settings user interface
    • Provides Tenable Nessus RPM packages using Enterprise Linux packaging and naming convention
    • Adds support for Ubuntu 22.04 LTS operating system
    • Adds support for Fedora 38 and Fedora 39 operating systems

    +3 more show less

    • Adds support for Debian 12 operating system
    • Adds support for macOS 14 operating system
    • Adds support for Amazon Linux 2023 operating system

    8 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Support removed for Fedora 35 and Fedora 36 operating systems
    • !Support removed for Amazon Linux 1 operating system
    • !Support removed for macOS 11 operating system
    • !The user interface no longer accepts localhost as a proxy value; must use nessuscli to set
20. 10.6.0 Aug 29, 2023 · release notes

    Tenable Nessus 10.6.0 introduces web application scanning and configurable scan retention in Tenable Nessus Manager.

    • Tenable Nessus Expert now supports web application scanning.
    • You can configure the number of days that Tenable Nessus Manager retains scans.

    2 details in Everything

21. 10.5.0 Mar 2, 2023 · release notes

    Nessus 10.5 adds Docker support for managed scanners, custom filter saving, and Attack Surface Discovery export.

    • Adds Docker image deployment for Tenable Security Center -managed scanners
    • Adds the ability to save custom filter configurations in the UI
    • Adds the ability to export Attack Surface Discovery scan results
    • Updates the Tenable Nessus Manager Sensors tab to show agent UUIDsUUIDsA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide.

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removed support for FreeBSD 11 and earlier, Ubuntu 13.10 and earlier, SUSE 11 and earlier, Debian 9 and earlier, Oracle Linux 6 and earlier, CentOS 6 and earlier, Kali 2019 and earlier, Windows 8 and earlier, Windows Server 2008 R2 and earlier, macOS 10.15 and earlier
22. 10.4.2 Jan 18, 2023 · release notes

    Nessus 10.4.2 allows configuring Java executable path via nessuscli fix subcommand.

    └──▷ BREAKING ON UPGRADE

    • !The ability to specify a Java executable path from the Tenable Nessus user interface is removed.
23. 8.15.8 Jan 18, 2023 · release notes

    Nessus 8.15.8 is an end-of-life release that introduces a new CLI option for Java path configuration and improves scanner migration capabilities.

    └──▷ BREAKING ON UPGRADE

    • !The ability to specify a Java executable path from the Tenable Nessus user interface has been removed.
24. 10.4.0 Oct 27, 2022 · release notes

    Nessus 10.4.0 adds in-app trial activation, Terrascan result viewing, bulk agent management and FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments./TLS 1.3 support

    • Adds activate trials from within the application to start Tenable Nessus Professional and Expert trials on first launch
    • Adds ability for Tenable Nessus Expert users to view Terrascan results in the user interface
    • Adds bulk commands in the Tenable Nessus Manager UI to manage multiple agents at once
    • Supports parentheses ( and ) in Nessus usernames
    • Enables FIPS mode communications

    +1 more show less

    • Adds ChaCha20-Poly1305 cipher, Ed25519Ed25519A fast elliptic-curve signature scheme with small keys, the default for new SSH keys and common in code signing. It is not quantum-safe./Ed448 signature algorithms, and x25519/x448 key exchange protocols to TLS 1.3 support

    6 details in Everything

25. 10.3.0 Jul 11, 2022 · release notes

    Nessus 10.3.0 adds Expert licensing UI, Terrascan and BitDiscovery Attack Surface Discovery scans, scan-level CA config, and differential plugin updates for Tenable One scann

    • Adds Tenable Nessus Expert license tier and in-UI upgrade path from the user interface
    • Integrates Terrascan scanning features into Tenable Nessus Expert
    • Adds BitDiscovery Attack Surface Discovery scan template with 100,000 child domain limit and 2,500 default view result limit
    • Enables configuring trusted certificate authorities (CAs) for individual scans via nessuscli or UI
    • Updates Tenable One Vulnerability Management-linked scanners to support differential plugin updates

    +1 more show less

    • Updates OpenSSL to version 3.0.5

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Cannot downgrade from Nessus Expert back to Nessus 10.2; doing so puts the application in a nonfunctional state.
    • !Custom plugins may fail compilation against the updated NASL compiler standards outlined in the NASL Library Optimization guide.
26. 10.2.0 May 26, 2022 · release notes

    Tenable Nessus 10.2.0 adds Scan Summary tab, AWS aws_scanner flag, BYOL Instance ID targets, audit trail failures, agent update plans, and audit signing.

    • Adds aws_scanner flag to the Nessus AWS integration workflow to enable auto-discovery of targets for Tenable One Vulnerability Management
    • Adds Scan Summary tab in Nessus Professional to highlight important scan data
    • Enables BYOL scanners to add scan targets by Instance ID
    • Adds details of plugin execution failures to audit trails
    • Enables configuration of update plans for Tenable Agents linked to Nessus Manager

    +1 more show less

    • Enables audit signing support for Tenable Agent to provide secure verification capability for audit scanning files

    6 details in Everything

27. 10.1.2 Mar 30, 2022 · release notes

    Nessus 10.1.2 adds Terrascan static code analysis for IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. on Professional and Essentials instances.

    └──▷ BREAKING ON UPGRADE

    • !Dynamic plugin compilation update may cause custom plugins to fail if they do not adhere to the updated NASL Library Optimization standards.
28. 10.1.0 Jan 31, 2022 · release notes

    Nessus 10.1.0 adds OS support for Oracle Linux 8, Windows 11/Server 2022, and ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. Graviton2; renames Executive Summary report template.

    • Adds support for Oracle Linux 8 as a supported operating system for the scanner
    • Adds support for Windows 11 as a supported operating system for the scanner
    • Adds support for Windows Server 2022 as a supported operating system for the scanner
    • Adds support for Ubuntu 18 for Arm/Graviton2 architecture
    • Adds support for Mac 12 (Monterrey) as a supported operating system for the scanner

    +2 more show less

    • Discards results of unreachable targets mid-scan when the stop_scan_on_disconnect flag is enabled
    • Renames the Vulnerability Operations report template to Executive Summary

    7 details in Everything

29. 10.0.2 Dec 14, 2021 · release notes

    Tenable One allows triggering immediate plugin updates from the UI instead of waiting for the 24-hour cycle.

    • Adds an option in the Tenable One Vulnerability Management user interface to trigger an immediate plugin update on scanners

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !Custom NASL plugins may fail compilation if they do not adhere to the updated standards outlined in the NASL Library Optimization guide.
30. 10.0.1 Nov 17, 2021 · release notes

    Nessus 10.0.1 restores basic scan report generation from Tenable Security Center-managed scanners.

    • Improves compilation performance of daily plugin differential updates via the dynamic plugin compiler.

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !Custom plugins may experience compilation failures if they do not adhere to the updated standards outlined in the NASL Library Optimization guide.
31. 10.0.0 Nov 1, 2021 · release notes

    Nessus 10.0.0 adds Raspberry Pi support, dark mode, custom reporting, agent scan summary tab, Resource Center, built-in packet capturepacket captureA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. via scan config, and SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. cipher updates

    • Adds Raspberry Pi platform support to run portable Nessus scans on low-cost hardware
    • Adds dark mode UI theme for long-duration viewing sessions
    • Adds customizable reporting to tailor reporting data according to user needs
    • Adds new Summary tab for agent scan results to provide visibility into cluster scans in Nessus Manager
    • Adds new Resource Center for announcements, feedback, and help

    +3 more show less

    • Adds built-in packet capture controllable via scan configuration to debug unexpected results and network access issues
    • Improves plugin compiler with reduced disk usage, faster initial installation, and faster plugin update processing
    • Enhances user interface experience with list multi-select and scan score details

    8 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Red Hat Enterprise Linux 5 is no longer supported.
32. 8.15.0 Jun 15, 2021 · release notes

    Nessus 8.15 adds nessuscli import-certs command and merge_plugin_results advanced setting for plugin result merging.

    └──▷ TRY IT
    Validate and deploy certificates via the command line without using the UI.
    copy

    $ nessuscli import-certs

    • nessuscli import-certs subcommand added to the Nessus CLI for adding and validating certificates in the correct directory
    • merge_plugin_results Advanced Setting added to support merging plugin results that generate multiple findings with the same host, port, and protocol
    • nessuscli.log log file introduced to log all Nessus CLI operations

    3 details in Everything

33. 8.14.0 Apr 5, 2021 · release notes

    Nessus 8.14.0 adds CVSSv3/VPR severity bases, VPR Top Threats tab, Top 10 report, and Apple M1 native support

    • Adds configurable default severity base (CVSSv2 or CVSSv3) via the Default Severity Base setting in the Nessus UI
    • Allows individual scans to override the global default severity base with a specific CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. version per scan configuration
    • Adds Top Threats by VPR tab to scan results view, displaying the 10 most severe vulnerabilities based on Tenable Predictive Prioritization scores
    • Introduces Nessus Top 10 Vulnerabilities Report in reporting capabilities, summarizing top critical/high vulns and prevalent plugins
    • Enables native Apple M1 chip support for the Nessus desktop application without compatibility mode

    5 details in Everything

34. 8.13.0 Dec 7, 2020 · release notes

    Nessus 8.13.0 adds Docker deployment, Amazon Linux 2/macOS Big Sur support, remote agent configuration, and new predefined reports for Nessus Professional.

    • Adds ability to deploy Nessus as an official Docker image for containerized operation with plugin support
    • Extends OS support to include Amazon Linux 2 and Apple macOS Big Sur (11)
    • Enables remote configuration of agent settings from Nessus Manager instead of configuring directly on the agent

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Downgrading to prior versions is prevented if a master password is configured to prevent DB corruption.
35. 8.12.0 Oct 8, 2020 · release notes

    Nessus 8.12.0 introduces Agent Cluster Groups, three new predefined reports for Nessus Professional, and support for additional operating systems.

    • Agent Cluster Groups: Organize cluster nodes and agents into logical groups to conform to network topology in Tenable Security Center
    • Predefined Unsupported Software report for Nessus Professional to list unsupported software found in the environment
    • Predefined Exploitable Vulnerabilities report for Nessus Professional detailing detected vulnerabilities with known exploits
    • Predefined OS Detections report for Nessus Professional listing operating systems found on scanned targets
    • Support for running Nessus on SUSE Linux Enterprise Server 15, FreeBSD 12.x, Kali 2018/2019/2020, and Ubuntu 20.04

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Scanner tab has been removed from the Nessus user interface for all license types except Nessus Manager
    • !Cluster child nodes are no longer accessible via the user interface; management must be done from the parent node
36. 8.11.1 Aug 20, 2020 · release notes

    Nessus 8.11.1 adds millisecond timestamps to nessusd.dump logs, agent duplicate detection, and IP/plugin context for security notes.

    • logfile_msec advanced setting now enables millisecond resolution for nessusd.dump log file timestamps
    • Agent setting detect_duplicates detects agents with identical MAC addressesMAC addressesA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet. and auto-unlinks them
    • Scan security notes now display the target IP address and plugin ID for debugging context

    3 details in Everything

37. 8.11.0 Jul 14, 2020 · release notes

    Nessus 8.11.0 adds silent install for Windows, log rotation settings, SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. enforcement, and PBKDF2 password hashing.

    • Adds silent installation and uninstallation support on Windows via command-line flags
    • Adds nessusd.dump log rotation with user-configurable Advanced Settings
    • Enforces ssl_mode and ssl_cipher_list for outbound communication from scanners to other systems

    3 details in Everything

38. 8.10.0 Mar 24, 2020 · release notes

    Nessus 8.10.0 adds Backup/Restore tool, Upgrade Plan control, Predefined Linking Key, and Downgrade support.

    • Adds Backup and Restore Tool to create Nessus backups that can be easily restored
    • Adds Nessus Update Plan configuration in Tenable One linked scanners to control version updates (GA, Early Access, or Delayed)
    • Adds Downgrade Option allowing rollback to a prior Nessus version (minimum 8.10.0)
    • Adds Slow Rollout feature to separate GA release timing for Tenable Update Server vs Tenable One Vulnerability Management
    • Adds ability to Predefine Nessus Manager linking key in the UI to streamline Agent/scanner deployment

    +1 more show less

    • Adds scanner group specification capability when linking scanners to Tenable One Vulnerability Management via CLI

    6 details in Everything

39. 8.9.1 Mar 4, 2020 · release notes

    Nessus 8.9.1 adds macOS Catalina support and updated SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. cipher options leveraging OpenSSL 1.1.1

    • Adds support for MacOS Catalina (10.15) as a new operating system platform.
    • Updates SSL cipher options to take full advantage of OpenSSL 1.1.1.

    2 details in Everything

40. 8.9.0 Jan 23, 2020 · release notes

    Nessus 8.9.0 adds environmental variable support to sensor deployment and increases plugin database size limit.

    • Capability to include environmental configuration variables as part of a sensor installation.
    • Capability for Nessus to support plugin databases greater than 4 GB.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !OpenSSL v1.1.1 update changes the ciphers and SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. versions supported.
41. 8.7.2 Oct 10, 2019 · release notes

    Nessus 8.7.2 adds international character display in scan results.

42. 8.7.0 Sep 24, 2019 · release notes

    Nessus 8.7.0 adds Nessus Manager clustering for agent migration, Research News widget, and scan launch from result sets

    • Adds support for agent migration into Nessus Manager clusters without requiring a licensing flag
    • Adds Tenable Research News Widget to Nessus Essentials UI displaying RSS feed-based notifications of recent publications
    • Adds Host Discovery Scan Wizard for new Nessus Essentials and Professional trial users upon first use
    • Adds License Utilization page in Nessus Essentials and Professional Trial showing consumed hosts and time until license count resets
    • Allows launching scans from the result set of another scan by selecting hosts to pre-populate targets

    5 details in Everything

43. 8.6.0 Aug 13, 2019 · release notes

    Nessus 8.6.0 adds telemetry opt-out, scan/policy ownership claims, and dismissible license notifications.

    • Adds an advanced setting allowing users to opt out of sending telemetry data back to Tenable
    • Adds capability for administrators to claim ownership of user scan and policy content for enterprise supportability

    2 details in Everything

44. 8.5.0 Jun 25, 2019 · release notes

    Nessus 8.5.0 adds direct Essentials-to-Professional upgrade, host discovery IP limit removal, report filtering enhancements, and license grace period.

    • Streamlined activation and registration process allows registering and upgrading from Nessus Essentials to Nessus Professional directly from the application.
    • Enhanced report filtering enables generating reports for selected hosts and vulnerabilities by selecting items and choosing Report without pre-building filters, with the Report action separated from Export.
    • Removed IP license restrictions for Host Discovery scanning, allowing Essentials and Professional trial customers to scan full network ranges without IP limits.
    • Updated license expiration behavior introduces a 30-day grace period to access the application and review scan results after scanning is disabled.

    4 details in Everything

45. 8.4.0 May 14, 2019 · release notes

    Nessus 8.4.0 introduces Nessus Essentials tier, granular agent blackout windows, and customizable CSV field exports.

    • Introducing Nessus Essentials, a free vulnerability scanner for up to 16 IPs as an entry point into the Tenable ecosystem
    • Extended Agent Blackout Windows in Nessus Manager with increased granularity, allowing specific control over allowed and disallowed activities during blackouts
    • Enhanced CSV export capability allowing users to select which fields to include and revert to default settings

    3 details in Everything

46. 8.3.0 Mar 26, 2019 · release notes

    Nessus 8.3.0 adds granular report export selection, agent optimization settings, and plugin_output_max_size_kb config.

    • Adds the ability to select precisely which information (e.g., host info, vulnerability data) is included when exporting PDF and HTML reports in Nessus Professional
    • Adds new Advanced Settings options to optimize agent data merge performance for Nessus Manager deployments
    • Adds plugin_output_max_size_kb advanced setting to configure the maximum per-plugin output size for XML elements in .nessus reports

    3 details in Everything

47. 8.2.0 Jan 22, 2019 · release notes

    Adds Scanner Health page and automated migration path to Tenable One for Nessus Pro/Manager.

    • Adds Scanner Health page with real-time host stats, memory/CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. usage, and scan asset counts.
    • Adds automated configuration migration from Nessus Professional or Manager to Tenable One Vulnerability Management platform.
    • Exposes additional audit trail configurations via advanced settings.
    • Allows adjusting log levels without restarting the service.

    4 details in Everything

48. 8.1.0 Dec 4, 2018 · release notes

    Nessus 8.1.0 introduces dynamic scan policies allowing auto-matching of plugins via filters like all exploitable.

    • Dynamic Scan Policies allow users to build scans using specific filters (e.g., all exploitable) that automatically include matching plugins.
    • Improved the Advanced Settings UI for a more straightforward view of advanced controls.

    2 details in Everything

49. 8.0.1 Nov 1, 2018 · release notes

    End-of-life release reinstating a CLI tool for plugin discovery.

    └──▷ TRY IT
    Export a list of available plugins from the Nessus service.
    copy

    $ nessusd -X

    • nessusd -X
    • CLI command added

    2 details in Everything

50. 8.0.0 Oct 23, 2018 · release notes

    Nessus 8.0 adds Live Results, vulnerability snoozing, and local log extraction to the UI.

    • Live Results feature scans check newly-released plugins against previously collected scan data without running a full new scan
    • Vulnerability Snoozing/Inboxing allows users to snooze a vulnerability for a period of time so it reappears after the set time period
    • Users can download local Nessus logs for troubleshooting from the Nessus user interface via Local Log Extraction
    • Vulnerability Grouping groups vulnerabilities together by application, plugin, etc. to truncate and show related vulnerabilities

    4 details in Everything

51. 7.1.3 Jul 31, 2018 · release notes

    Nessus 7.1.3 doubles supported Nessus Plugins Database size beyond 2 GB

    • Ness Engine handles compiled plugin databases exceeding 2 GB in size

    1 detail in Everything

52. 7.1.2 Jun 26, 2018 · release notes

    Adds configurable scan history retention limit and UI link change to Tenable One for Nessus Managed scanners.

    • Adds ability to set a limit on the amount of scan history (in days) retained to manage disk usage
    • Allows changing the link destination of a Nessus scanner from Security Center to Tenable One Vulnerability Management within the UI of a Nessus Managed scanner

    2 details in Everything

53. 7.1.1 Jun 13, 2018 · release notes

    Nessus 7.1.1 adds automatic agent hostname updates via update_hostname, full CSV agent export in UI, and unlinked agent tracking.

    • update_hostname parameter on the Nessus Agent automatically syncs agent hostname changes to Nessus Manager
    • Full list of agents exportable as a .csv report via the Nessus Manager UI

    2 details in Everything

54. 7.1.0 May 15, 2018 · release notes

    Nessus 7.1.0 adds upgrade assistant to Tenable One, improves password complexity, and Eval purchase link.

    • Adds Nessus Professional to Tenable One Vulnerability Management Upgrade Assistant
    • Improves Nessus password complexity and management rules

    2 details in Everything

55. 7.0.3 Mar 14, 2018 · release notes

    Nessus 7.0.3 adds BeyondTrust PasswordSafe as a credential source for Windows and SSH

56. 7.0.1 Jan 11, 2018 · release notes

    Nessus 7.0.1 adds Meltdown/Spectre policy template and fixes SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. credential issues on IE 11

    • Adds a new Meltdown / Spectre Policy Template to the web interface for detecting CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. hardware vulnerabilities.

    1 detail in Everything

57. 6.10.9 Jul 14, 2017 · release notes

    Nessus 6.10.9 adds bulk API support for remote scanner task updates

    • Enables remote scanners to utilize bulk API for task updates

    1 detail in Everything

58. 6.10.8 Jun 21, 2017 · release notes

    Nessus 6.10.8 adds pre-auth AWS VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. peer scanning and fixes scan crashes

    • Scan peered VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules. in a single pre-auth AWS scanner

    1 detail in Everything

59. 6.10.7 May 31, 2017 · release notes

    This release includes the new Shadow Broker detection capability alongside standard bug fixes and platform package updates.

60. 6.10.6 May 24, 2017 · release notes

    Nessus 6.10.6 adds WannaCry and IntelAMT vulnerability policies plus custom CyberArk URL support.

    • Adds policy for WannaCry
    • Adds policy for IntelAMT Vuln
    • Adds ability to add custom URL to CyberArk credentials

    3 details in Everything

61. 6.10.0 Jan 31, 2017 · release notes

    Nessus 6.10.0 adds offline scanner capability and SUSE agent support with a new NASL compiler.

    • Adds Tenable One Vulnerability Management Offline Scanner for air-gapped environments.
    • Adds support for Nessus agents and managed scanners on SUSE 11 and 12 platforms.
    • Introduces a new NASL compiler that enables faster plugin execution.

    3 details in Everything

62. 6.9.0 Oct 25, 2016 · release notes

    Nessus 6.9.0 adds support for Nessus agents on macOS Sierra and Windows Server 2016, plus new platforms.

    • Support for Nessus Professional and Scanners on Kali Linux 2016 Rolling
    • Support for Nessus Pro/Scanner/Manager on Windows Server 2016

    2 details in Everything

63. 6.7.0 May 19, 2016 · release notes

    Nessus 6.7.0 adds Thycotic Secret Server integration, non-root execution, and custom agent-scanner ports.

    • Supports Thycotic Secret Server as an External Credential Store in Nessus Cloud/Manager
    • Allows Nessus to run as a user other than root
    • Allows agents and scanners to communicate with Nessus Manager on a different port than the UI
    • Enables Nessus Cloud administrators to view scans of all users

    4 details in Everything

64. 6.6.0 Apr 11, 2016 · release notes

    Nessus 6.6.0 adds filesystem malware detection, PCIPCIA hardware bus standard that connects peripheral devices to a computer's motherboard; cyber tools targeting hardware-level forensics or memory analysis use it to access device registers and DMA regions directly. scan template, and new platform support.

    • Adds the ability to detect malware on the filesystem
    • Adds the Internal Network PCI Scan template to Nessus Cloud
    • Adds Windows 10, Debian 8, and Kali 2.0 platform support for Nessus Professional, Nessus Manager, and managed Nessus scanners
    • Adds Windows 10 and Debian 8 platform support for Nessus Agents

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Nessus Cloud no longer supports Internet Explorer 10 and under
65. 6.5.4 Dec 14, 2015 · release notes

    Adds support for Nessus and Nessus Agents on macOS El Capitan.

66. 6.5.0 Oct 12, 2015 · release notes

    Nessus 6.5.0 adds Ubuntu/Amazon Linux/Debian agent support, SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone., Azure audits, and new API scan filter

    • Adds Agents for Ubuntu, Amazon Linux, and Debian to expand remote scanning platform coverage.
    • Adds SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. for Nessus Cloud via SAML (SSO ... via SAML).
    • Adds Two-factor Support in Nessus Cloud via SMSSMSShort Message Service, the protocol built into cellular networks for sending text messages between phones; cyber tools use it for alerting, two-factor authentication delivery, or phishing simulation over mobile channels. and email.
    • Adds Application Black and White Listing for Airwatch and MobileIron MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies..
    • Adds Apple ProfileManager MDM audit capability.

    +10 more show less

    • Adds Cloud Services Audit - Microsoft Azure Configuration Assessments for new platform support.
    • Allows managed scanners to be linked with Nessus Cloud/Manager via command line.
    • Adds ability to exclude aborted/failed scans from trends.
    • Adds Trend Indicators to Scan Dashboards.
    • Adds type parameter to GET /scans API endpoint to distinguish between agent and active scans.
    • Logs job name and UUIDUUIDA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide. when writing scan progress logs in nessusd.messages.
    • Brute Force: Only use credentials provided by the user added to Credentialed Patch Audit template.
    • Notifies user on failure if Windows Agent fails to link during install.
    • Adds auto update frequency option to Software Update in settings.
    • On-demand scans default to not launching after being created.

    15 details in Everything

67. 6.4.0 Jun 30, 2015 · release notes

    Nessus 6.4.0 adds MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. audits, external credential store support, API tokens, and CVE filtering.

    • Adds AirWatch MDM audit capabilities for mobile device managementmobile device managementMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies.
    • Adds MobileIron MDM audit capabilities for mobile device management
    • Adds Cloud Services Audit - RackSpace Configuration Assessment integration
    • Adds auditing of open ports on Linux/Unix systems
    • Adds ability to copy scans within the UI

    +3 more show less

    • Adds import of Nmap results into Nessus to seed scan knowledge base
    • Adds Agents for OS X, RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence., and Fedora platforms
    • Allows access to Nessus APIs via API tokens

    8 details in Everything

68. 6.3.0 Mar 3, 2015 · release notes

    Nessus 6.3 introduces Windows Agents, scan dashboards, and multi-DB compliance scans.

    • Adds Nessus Agents for Windows to enable endpoint scanning
    • Adds Scan Dashboards in the UI for scan visibility
    • Adds the ability to disable/enable scans from the scan list without editing them
    • Introduces a new licensing model for Nessus 6.3
    • Enables scanning multiple DB instances in a single compliance scan

    5 details in Everything

69. 6.2.0 Jan 20, 2015 · release notes

    Nessus 6.2.0 adds disabled scheduled scans, credential/compliance search, i386 support, and OS X 10.10/Fedora 21 platform support

    • Disable Scheduled Scans ability added to pause scan schedules without deletion
    • Credential and Compliance search feature added to locate scans by credential or compliance policy
    • Retrieve capability for uploaded compliance check audit files
    • BlueCoat and Check Point compliance wizard updates
    • Altiris PM integration adds package reporting for Red Hat Enterprise Linux and SuSE Linux

    +3 more show less

    • Nessus 6 is now available for i386 (32-bit) architectures
    • OS X 10.10 (Yosemite) support added
    • Fedora 21 support added

    8 details in Everything

70. 6.0.0 Oct 14, 2014 · release notes

    Nessus v6 introduces an automated update engine, a new RESTful API replacing XML-RPCXML-RPCA remote procedure call protocol that encodes calls and responses as XML over HTTP, letting a client invoke functions on a remote server without a custom binary protocol., and built-in compliance policy editor.

    • Adds automatic or user-initiated updates for the Nessus engine and UI
    • Adds a documented RESTful API for integrations, accessible from the Nessus UI
    • Adds a Compliance and System Hardening Policy Editor within the Nessus UI
    • Adds hundreds of out-of-the-box compliance and system hardening policies via the plugin feed

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The XMLRPC API has been replaced by the RESTful API.
71. 5.2.2 Sep 12, 2013 · release notes

    Nessus 5.2.2 adds full database export for scanners and a faster web mirror plugin.

    • Adds the ability to export reports as full DBs that can be moved from one scanner to another

    1 detail in Everything