The Security Auditors Research Assistant (SARA) is a third generation Unix-based security analysis tool that is:
Used for CIS benchmark initiatives
Plug-in facility for third party apps
SANS/ISTS Certified New
CVE standards support
Enterprise search module
Standalone or daemon mode
Free-use open SATAN oriented license
Updated twice a month
User extension support
Based on the SATAN model.
Advanced Researchs philosophy relies heavily on software re-use. Rather than inventing a new module, SARA is adapted to interface to other community products. For instance, SARA interfaces with Nmap for superior "Operating System fingerprinting". Also, SARA provides a transparent interface to SAMBA for SMB security analysis.
