Secunia Personal Software Inspector (PSI)

[rudger]

http://secunia.com/vulnerability_scanning/personal

Taken from the Secunia Website.

Secunia PSI 3.0 is a free computer security solution that identifies vulnerabilities in non-Microsoft (third-party) programs which can expose PCs to attacks. Simply put, it is scanning software which identifies programs in need of security updates to safeguard the data on your PC against cybercriminals. It then supplies your computer with the necessary software security updates to keep it safe. The Secunia Personal Software Inspector (PSI) even automates the updates for your insecure programs, making it a lot easier for you to maintain a secure PC. Using a scanner like Secunia PSI 3.0 is complementary to antivirus software, and as a free computer security program, is essential for every home computer.

[Larry Sabo]

I prefer PatchMyPC. Just does the job in a single click. Only complaint is that it needs NET Framework installed, so I install it if needed.

[Galdorf]

Actually with Secunia PSI you don't have to touch anything it can auto fix all your problems where patchmypc has to be run manually.
Thing is with one update of say flash it can end up with a vulnerability exploit while the customer has the machine Secunia PSI will auto patch it without user intervention.
Also they are VERY fast at picking up zero day exploits and auto patch the problems.

[Larry Sabo]

Secunia's terms:

3.6 The Software and the Website Service may not be used for business or commercial purposes.

PatchMyPC is free for personal and commercial use.

[technibbling]

Found this:

http://secunia.com/vulnerability_sca...ecome_partner/

I'll check it out.

[Larry Sabo]

Yeah, I read that, too. But the part that says...

Permission to offer the PSI as downloadable executable, ensuring that the partner can continue to provide the solution free-of-charge to its users within the timeframe of the partnership, minimum 12 months.

...makes it sound like all you can do is offer a link to the download (on your server or theirs is not clear). Browsing their forum doesn't instill much confidence, although I used to install Secunia PSI with no problem (and no thought about violating an end-user agreement).

I couldn't find a "Contact us" ink to ask if it's okay to install and run on users' behalf. Will be interested to hear what you can find.

[Galdorf]

What i do is clean machine after its clean i leave a url to website on favorites and ask customer to download and install it that way you don't break the end-user agreement.
It works on it's own so in reality i don't use it not breaking any rules as long as i don't install it myself.

They made it much easier to install and setup so the customer does it on their own.

[atlanticjim]

I bumped this thread just to add a note about Secunia OSI - Online Software Inspector, the sister to PSI.

This is a nice non-intrusive no-remnants-left-behind solution for automatically checking for software vulnerabilities and updating about 100 programs, including MS updates.

A recent scan of a repaired machine found that java and flash needed updating.