4 ms·

Nice. I use some of these. Unfortunately,commercial software is a few years ahead for some of the more complicated projects. I prefer opensource but lack of s

Nice. I use some of these. Unfortunately,commercial software is a few years ahead for some of the more complicated projects. I prefer opensource but lack of support is a deal breaker in many professional environments.

gerdesj 7y ago
Security is a funny old thing. I don't think that a discussion that starts with worrying about open source vs not open source is too relevant. I use quite a few of those tools as well and I'm blowed if I'll spend much money on software in this sphere. I'll spend it on expertise though, if I need help. I do have a sub for a Nessus scanner for some simple marking of my homework and laying a baseline. If you need "professional grade" support for this stuff, then you are probably in the wrong line of work.
- badrabbit 7y ago
  Not true at all. I have stood up some of those projects in this post and when I left the org,there was no one else to support them and it became cheaper to pay some vendor to give you an appliance than run it all in-house. With abundance of internal staff who can support it,opensource is viable but not always competitive either.
- tastroder 7y ago
  > If you need "professional grade" support for this stuff, then you are probably in the wrong line of work. Given that approximately 99% of itsec is consultants I'm not sure where you get that from. Not everybody knows every subfield and tool, sometimes you pay people for their real world experience with one they gained from other clients. And of course licensing, prices, and support matter in the real world.
dwheeler 7y ago
Nothing about open source prohibits professional support. Indeed, a lot of companies make money providing professional support of Open Source software. If you want paid support for OSS, then go look for it... you will often find it.

4 ms·

Nice. I use some of these. Unfortunately,commercial software is a few years ahead for some of the more complicated projects. I prefer opensource but lack of s

by badrabbit 7y ago

gerdesj 7y ago
Security is a funny old thing. I don't think that a discussion that starts with worrying about open source vs not open source is too relevant. I use quite a few of those tools as well and I'm blowed if I'll spend much money on software in this sphere. I'll spend it on expertise though, if I need help. I do have a sub for a Nessus scanner for some simple marking of my homework and laying a baseline. If you need "professional grade" support for this stuff, then you are probably in the wrong line of work.
- badrabbit 7y ago
  Not true at all. I have stood up some of those projects in this post and when I left the org,there was no one else to support them and it became cheaper to pay some vendor to give you an appliance than run it all in-house. With abundance of internal staff who can support it,opensource is viable but not always competitive either.
- tastroder 7y ago
  > If you need "professional grade" support for this stuff, then you are probably in the wrong line of work. Given that approximately 99% of itsec is consultants I'm not sure where you get that from. Not everybody knows every subfield and tool, sometimes you pay people for their real world experience with one they gained from other clients. And of course licensing, prices, and support matter in the real world.
dwheeler 7y ago
Nothing about open source prohibits professional support. Indeed, a lot of companies make money providing professional support of Open Source software. If you want paid support for OSS, then go look for it... you will often find it.