Open-AudIT 6.0 Released: AI-Powered CVE Detection & Policy Testing

We're thrilled to announce Open-AudIT 6.0: the most significant release in the project's history. This version brings intelligent, contextual vulnerability detection to help you focus on the CVEs that actually matter to your environment.

What's New in 6.0

Contextual Vulnerability Management

Open-AudIT 6.0 automatically cross-references your discovered devices against the NIST National Vulnerability Database (NVD) to identify relevant CVEs. Unlike generic vulnerability scanners, Open-AudIT knows exactly what software and firmware versions are running on each device, so it only surfaces CVEs that apply.

• Zero false positives from software you don't actually run
• Severity scoring mapped to your real-world exposure
• Remediation tracking so you can mark CVEs as resolved, accepted or in-progress

Policy Testing Against CIS Benchmarks

New in 6.0: run automated configuration audits against CIS Benchmarks for Windows, Linux and network devices. Open-AudIT checks discovered configurations against the benchmark and produces a pass/fail report with remediation guidance.

Supported benchmarks at launch:

• CIS Windows Server 2019/2022 Level 1 & 2
• CIS Ubuntu 20.04/22.04 LTS
• CIS Cisco IOS 15

Improved Dashboard

The default dashboard has been completely redesigned with:

• At-a-glance CVE summary by severity (Critical, High, Medium, Low)
• Compliance score cards for each benchmark
• Device health timeline showing when issues appeared
• Top 10 at-risk devices widget

Performance Improvements

• Discovery is now 2× faster on large subnets thanks to parallel scan workers
• Database queries for the device list have been optimised. Expect 5–10× faster page loads on installations with 10,000+ devices
• Memory usage during scanning reduced by ~30%

Upgrading from 5.x

Upgrading is straightforward. Back up your database first, then run:

# Ubuntu/Debian
sudo dpkg -i open-audit_6.0.0_amd64.deb

# The upgrade script will automatically migrate your database schema
sudo systemctl restart open-audit

Full upgrade documentation is available in the official docs.

Download

Open-AudIT 6.0 is available now at open-audit.org/download/.

Binaries are available for:

• Windows Server (64-bit)
• Ubuntu 20.04 / 22.04 LTS
• RHEL / CentOS 8+

Full Changelog

See the complete release notes for the full list of changes, bug fixes and known issues.

Thank You to Contributors

This release was made possible by contributions from the community. A huge thank you to everyone who filed bug reports, submitted pull requests and tested pre-release builds.

If you'd like to contribute to Open-AudIT 6.1, visit our contributing guide to get started.