Tenable Implements NIST's National Vulnerability Database (NVD) CVSS Scores in Nessus to Help Drive NIST's CVSS Scores as a Standard.

NIST recognizes that Tenable's Nessus is widely used within the Federal Government

COLUMBIA, Md. -- Tenable Network Security, Inc. a leading developer of security management solutions and creator of the popular and award-winning Nessus vulnerability scanner today announced the implementation of the National Institute of Standards and Technology (NIST) CVSS scores to help organizations improve discovery of vulnerabilities and prioritize remediation efforts. NIST recognizes that Tenable's Nessus Vulnerability Scanner is a widely used vulnerability discovery solution in the Federal Government. Tenable's implementation of NIST's CVSS scores will expedite uniform scoring across all US Federal Agencies.

"NIST has adopted the Common Vulnerable Scoring System (CVSS) for rating the impact of vulnerabilities published within the National Vulnerability Database (NVD). These scores are essential to enabling prioritization of vulnerability remediation. They are also a necessary component to NIST's efforts to automate FISMA technical control compliance. NIST is delighted that security companies such as Tenable are including National Vulnerability Database (NVD) Common Vulnerable Scoring System (CVSS) scores within their products. This will foster incorporation of U.S. government vulnerability impact scores within the Federal government and security community. NVD CVSS scores are essential to NIST's larger efforts to enable commercial tools to automate FISMA technical control compliance and to perform security measurement. Tenable's move in this direction will better enable them to support our efforts in this area," said Peter Mell, NIST Senior Computer Scientist and National Vulnerability Database Program Manager.

"Tenable's Security Center, Passive Vulnerability Scanner and Nessus Vulnerability Scanner all currently provide support for NIST's CVSS scores, and our research team is actively engaged with NIST on scoring for new vulnerabilities. We believe that our federal customers will greatly benefit from one universal severity rating for security vulnerabilities," says Ron Gula, CEO of Tenable.

About NIST

Founded in 1901, NIST is a non-regulatory federal agency within the U.S. Commerce Department's Technology Administration. NIST's mission is to promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life. For more information, please visit NIST: http://www.nist.gov.

About Tenable Network Security

Tenable Network Security is a leading provider of network security software solutions for vulnerability, security event, and compliance management. Tenable's award-winning products are utilized by many Global 2000 organizations and Government agencies to discover, unify and manage known vulnerabilities and log data to proactively minimize network risk. For more information, please visit http://www.tenablesecurity.com.