[email protected]
DEEN

OpenVAS Hosting in Germany

WZ-IT runs OpenVAS as a dedicated instance in German data centres, with updates, daily backups, 24/7 monitoring and a personal contact. On request, we also install OpenVAS in your cloud or on premises.

Request hostingHosting & pricing
Reviews
Cloud Wolke HerausforderungServer NachhaltigkeitIT Beratung Service Consulting SoforthilfeTimo Wevelsiep Robin ZinsExperten für Innovation Migration AWSHetzner Hosting zuverlässig

Companies worldwide trust WZ-IT

  • Stadtwerke Brühl
  • DGHO e.V.
  • ABCO Water Systems
  • Golem.de
  • EVADXB
  • nextGYM
  • AInergy
  • ml&s
  • Odiseo Solutions
  • Annota
  • ARGE
  • SweetConnect GmbH
  • Aphy AG
  • CORGOS
  • Rekorder
  • SolidProof
  • Yonju
  • Keymate
  • Paritel
  • Mr. Clipart
  • Millenium
  • Negosh
  • Führerscheinmacher
  • Boese VA
Read client reviews

About the technology

What is OpenVAS?

OpenVAS is a comprehensive vulnerability scanner that supports both authenticated and unauthenticated testing and covers a wide range of high-level and low-level internet and industrial protocols.

With performance tuning for large-scale scans and a powerful internal programming language that allows you to implement any type of vulnerability test, the scanner offers extensive functionality. The test feed draws on a long history and is updated daily.

GitHubWebsiteOfficial Documentation

Features

  • Authenticated & Unauthenticated Testing

    Conduct security tests both with and without authentication to identify all vulnerabilities.

  • Extensive Protocol Support

    Test a wide range of internet and industrial protocols, from high-level to low-level.

  • Performance Tuning

    Optimized for large-scale scans to efficiently assess extensive IT networks.

  • Powerful Internal Programming Language

    Allows you to implement custom vulnerability tests of any kind.

  • Daily Feed Updates

    Access a comprehensive test feed with a long history that is updated daily.

  • Current CVE Integration

    Integrates current CVE information including links to CERT-Bund (Computer Emergency Response Team of the BSI) and others.

Infrastructure, integration and operations

OpenVAS as part of your infrastructure

We do more than provide an application. WZ-IT designs the technical architecture, integrates network and identity, operates the agreed scope and develops integrations when the standard product is not enough.

Architecture and migration

Sizing, target environment, data transfer, cutover and recovery are resolved before production operations.

  • On-Premise

    In your data center: Installation on bare-metal, VM or Docker · Integration with existing Active Directory/LDAP

  • Cloud Installation

    AWS, Azure, Hetzner & more: Installation on AWS, Azure, GCP, Hetzner · Terraform/IaC setup (optional) · Kubernetes or Docker Compose · Capacity and scaling design

  • Enterprise Setup

    Advanced architecture after technical and licence assessment: HA and recovery design where supported by the application and edition · Logging according to feature set and edition · Custom security policies

Network and identity

SSO, secure access, internal systems and existing security components are integrated appropriately.

  • VPN Access

    WireGuard, NetBird, Tailscale, Headscale, OpenVPN, Cloudflare Tunnel · Easy client setup for all devices

  • SSO Integration

    Directly or through an upstream identity layer

  • Multi-Factor Auth

    Depends on application, edition and identity provider

  • Firewall & Hardening

    Fail2Ban, Rate Limiting, IP Whitelisting

Monitoring and service level

Updates, backups, technical monitoring and response paths follow a transparent operational scope.

  • 24/7 proactive monitoring

  • Updates and patches

    Regular updates, CVE monitoring and prioritised patches for critical vulnerabilities

  • Daily backup with 7-day retention

  • Personal technical contact

Integration and development

APIs, automation and custom extensions can be delivered beyond basic deployment.

  • GMP (XML-RPC)

    The Greenbone Management Protocol enables full automation: Schedule scans, retrieve results, generate reports.

  • Alert System

    Critical findings can trigger alerts: Email, SNMP trap, syslog, or webhook to your SIEM.

  • Custom NASL Scripts

    We develop custom vulnerability tests in NASL for your proprietary systems or internal compliance checks.

Full-service installation with no hidden costs

What the OpenVAS setup includes

  • Complete installation & configuration
  • SSL certificate & reverse proxy setup
  • Backup strategy & disaster recovery
  • Performance optimization & tuning
  • Security hardening following OWASP
  • Monitoring & logging setup
  • Documentation & best practices
  • Administrator training (remote)
  • 30 days email support included
  • Dedicated contact person
  • Optional integration: LDAP/AD, SSO, MFA
  • Update strategy & patch management setup

The exact scope depends on the application, edition, infrastructure and criticality. Vendor licences and non-standard components are quoted separately.

Concrete Use Cases

OpenVAS Development & Integration

OpenVAS is the open-source standard for vulnerability scanning. We extend it for your specific compliance requirements.

Compliance Scan Policies

Problem

ISO 27001 / BSI IT-Grundschutz require regular scans, but standard policies don't cover all requirements.

Solution

Custom scan configs checking exact compliance requirements. Reports automatically formatted for audits.

CI/CD Security Gate

Problem

New deployments could introduce vulnerabilities. Security check only happens weeks later.

Solution

OpenVAS scan as pipeline stage. Deployment blocked on critical/high findings, ticket automatically created.

CMDB Asset Correlation

Problem

Scan results show IPs, but who's the owner? Which system is affected? Manual mapping needed.

Solution

Integration with CMDB: Findings automatically enriched with asset owner, criticality rating and SLA requirements.

Managed Hosting & Operations

How much does OpenVAS hosting cost?

Compute, applications, storage and response are shown separately. You can see what ongoing operations include and which requirements need a technical assessment.

Starter workload from€99.90/ month · cancel monthly

OpenVAS hosting in Germany: GDPR-compliant operations

  • One managed standard application included
  • .de domain included or your own domain or subdomain via CNAME
  • German data centres with ISO 27001 and BSI C5, no US clouds
  • 99.9 % standard availability per month
  • Regular updates, CVE monitoring and prioritised patches for critical vulnerabilities
  • Central logs with immutable retention
  • Daily backup with 7-day retention
  • 5 TB outbound traffic per workload and month
  • 24/7 proactive monitoring
  • Five service levels, 24/7 P1 response with Production or Critical
  • Personal technical contact

Instance sizes and monthly prices

XS · 2 vCPU, 2 GB RAM, 40 GB NVMe SSD
€99.90 in total
S · 2 vCPU, 4 GB RAM, 80 GB NVMe SSD
€129.90 in total
M · 4 vCPU, 8 GB RAM, 80 GB NVMe SSD
€159.80 in total
L · 8 vCPU, 16 GB RAM, 80 GB NVMe SSD
€219.80 in total
XL · 16 vCPU, 32 GB RAM, 80 GB NVMe SSD
€329.80 in total
Additional storage per 50 GB
+€4.99
Configure now

Straightforward provisioning within a few business days

Payment
  • SEPA direct debit
  • Visa
  • Mastercard
  • American Express
  • Apple Pay
  • Google Pay
  • PayPal
  • Bank transfer

All prices are net and exclude statutory VAT. The offers are addressed to businesses. All on-premises options

Other options

Try it free for 7 days

Request a test instance

We set up a test instance for you, usually on the next business day. No payment details required. After seven days it is deleted unless you continue.

Request a test instance →Bring Your Own Infrastructure

Installation on Your Infrastructure

Installation on your own infrastructure · On-premise or in your cloud · Control over data location and access · Custom configuration · Complete documentation · Initial setup & configuration · Optional support and maintenance contract

Price on request, plus optional support & maintenanceRequest a proposal →On-premises option

Run OpenVAS on hardware at your organisation

As an alternative to managed hosting in the data centre, WZ-IT provides the hardware, configures OpenVAS, and handles hardening, monitoring, updates, backup and technical support. Access can be limited to the internal network or enabled through VPN and existing identities.

from €349 excl. VAT / month · plus one-time provisioning and initial setupView WZ-IT App Node →

Target architecture

Integrate OpenVAS into your infrastructure with clear controls

Security platforms create value only when data sources, resilient detection rules and clear response paths fit together.

Endpoints, systems and data sources

Agents, scanners, logs and interfaces provide defined security events and findings.

Secure access

TLS, firewall rules, reverse proxies or private network paths are designed around the platform's exposure.

Identity and permissions

Local accounts, SSO, directories, service accounts and emergency access are connected through clear roles.

OpenVAS platform

Analysis, correlation, vulnerability assessment and rules run in a controlled security environment.

Event and finding data

Indexes, retention, access protection and capacity aligned with the data rate.

Rules and updates

Controlled signatures, policies, exceptions and documented change processes.

Alerting and response

Prioritisation, deduplication, tickets and defined handoff to responsible teams.

The platform supports detection and response but does not replace risk assessment, ownership or agreed incident processes.

Role in the overall system

Related services for OpenVAS

This page covers installation and the agreed platform operations for OpenVAS. Custom code, the access layer and special confidentiality requirements remain clearly separated responsibilities that can be added when needed.

Maintain the application

Support custom code and integrations

Keep custom extensions, interfaces and dependencies controlled, updated and supportable.

View service Secure access

Connect users, sites and systems

Add identity-based access and private network paths as a separate operational layer.

View service Operate confidentially

Assess Section 203 requirements separately

For professional secrecy holders, define contractual, access and infrastructure requirements in a dedicated operating model.

View service

Three relevant adjacent paths instead of a long list of further products.

View the overall system

Frequently Asked Questions

Answers to the most important questions

Knowledge

More about OpenVAS

Tutorials & guides

Matching solutions for your project

Reviews & projects

Client feedback and projects worldwide

WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.
Steve KirchnerManaging Director, nextGYM GmbH
View project

International

Built in Germany's Ruhr Valley. Running worldwide.

WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.

Selected projects

Read client reviews

  • Secure your Proxmox & backup setup
  • Modernize your infrastructure - sovereign
  • Plan a sovereign open-source stack
  • Integrate a local AI solution
  • Modernize your legacy software
  • Cut cloud cost - up to −81%
  • Build a high-availability Proxmox cluster
  • Virtualize with Managed Proxmox
  • Design an open-source AI architecture
  • Get collaboration fully managed
  • Ship your prototype to production
  • Connect sites and clusters securely

Managed Hosting & Operations

Enquire about hosting and operations for OpenVAS

Briefly describe the current state and objective for OpenVAS. We assess infrastructure, integration, and ongoing operations.

  • Straight with Timo and Robin - no sales team, no pitch
  • A professional assessment of your situation
  • Concrete next steps for infrastructure, software or AI

The conversation is free and non-binding.

WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH
Email[email protected]Phone+49 2922 875068
Timo and Robin, founders of WZ-IT

Which OpenVAS service do you need?

Choose the appropriate starting point or simply describe the situation.

We usually respond within one business day. Please do not submit credentials.

WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH