name: nessus
category: vuln
description: Commercial vulnerability scanner (CLI interface).
keywords:
  - vulnerability
  - scanner
  - commercial
  - compliance
  - audit

parameters:
  action:
    type: enum
    options:
      - value: "start"
        description: "Start Nessus service"
      - value: "stop"
        description: "Stop Nessus service"
      - value: "status"
        description: "Check status"
    description: Service action

requires_root: true
timeout: 0
interactive: true

examples:
  - "systemctl start nessusd"
  - "systemctl status nessusd"

notes: |
  Web interface:
  - https://localhost:8834

  Setup:
  1. Install from tenable.com
  2. Start service
  3. Complete web setup
  4. Activate license

  Editions:
  - Essentials: Free, 16 IPs
  - Professional: Paid, unlimited
  - Expert: Advanced features

  Scan policies:
  - Basic Network Scan
  - Advanced Scan
  - Web Application Tests
  - Compliance checks

  API:
  - RESTful API available
  - Python pytenable library