Joval Editions
Developer EditionEmbeddable SCAP engine for software companies |
Enterprise EditionScalable SCAP scanning for organizations and service providers |
Professional EditionDesktop SCAP scanner for content authors and small, ad hoc scans |
|
| Basic Features | |||
| Included Components |
100% pure Java library for scanning
Server-based component for high-volume agentless scanning
Lightweight command-line utility for local scanning |
Desktop application | |
| Local Machine Scanning | |||
| Remote Scanning (agentless) | |||
| Scalability (agentless) | designed for enterprise-scale application |
3,000+ devices per hour per Sensor |
10 concurrent devices |
| Unattended Execution | |||
| Integration Options | via CLI, REST API, SDK |
||
| Reporting | Developer Edition | Enterprise Edition | Professional Edition |
| Bundled Reports | HTML reports, JSON events, SQL, XML, CSV |
embedded results viewer only |
|
| Detailed Diagnostic Reporting | exposes data model and display libraries |
drill into results to view test logic and values |
drill into results to view test logic and values |
| Custom Reporting | |||
| Platforms & Standards | Developer Edition | Enterprise Edition | Professional Edition |
| Supported Platforms (installation) |
Any Java-supported platform
Windows Server
Windows, Linux, Mac OSX, Solaris, AIX, HP-UX, Free BSD |
Windows Mac OSX Linux with Firefox (beta) |
|
| Supported Scan Target Platforms |
Windows XP SP3+, Windows Server 2003 SP2+ RHEL 5+, Fedora 14+, SUSE Desktop 10+, SUSE Enterprise Server 9+, Ubuntu 8.10+, Debian 6.0+ AIX 6.1+, Oracle Solaris 8+, HP-UX: 11.23+, FreeBSD: 8.4+, VMWare ESXi: 5.0+ Mac OSX Snow Leopard+, Apple iOS 5.1+ Cisco IOS 12.2+, Cisco IOS-XE 12.2+, Cisco ASA 9.0+, JunOS 8.5R1+ |
||
| SCAP 1.3 Coverage | Comprehensive SCAP 1.3 support. SCAP 1.3 Module Validation is pending full release of the program by NIST. The NIST SCAP Validation Program is a Joval customer and used Joval to develop and test the SCAP 1.3 program test content. |
||
| SCAP 1.2 Coverage | Built on SCAP 1.2 Validated Joval Engine | ||
| OVAL Test Coverage |
132 OVAL Tests compare to ovaldi (69 tests) and openSCAP (34 tests) |
||
| Licensing & Support | Developer Edition | Enterprise Edition | Professional Edition |
| Commercial Licensing | several models available |
annual subscription based on number of devices |
$1,000 per year per user ($350 per year per user |
| Support | via Joval Commerical Support Portal |
||
| Guaranteed Response Times | |||
| SCAP Validation Support | full support for applicable SCAP 1.2 & 1.3 validation requirements |
not applicable |
not applicable |
| Upgrades | included in subscription |
||
| Integration Support | 40 hours included |
20 hours included |
not applicable |
| Custom Terms of Service & Service Level Agreements | for 100,000+ devices |
for 20,000+ devices |
|
Developer EditionEmbeddable SCAP engine for software companies |
Enterprise EditionScalable SCAP scanning for organizations and service providers |
Professional EditionDesktop SCAP scanner for content authors and small, ad hoc scans |
|
Java SDK
Joval Sensor
Joval UtilityScan Anything from Anywhere
Use Joval's powerful cross-platform capabilities to:
- Scan Windows, Linux, Solaris, AIX, HP-UX, MacOS X, VMWare ESXi, Cisco IOS, Cisco IOS-XE, Cisco ASA, Juniper JunOS, Apple iOS out of the box and other platforms via extension
- From the device (host-based) OR over the network (agentless sensor)
Best-in-Class Standards Support
Joval natively processes OVAL, XCCDF, SCE, and related configuration assessment standards used in:
- Authoritative vulnerability content from vendors like Cisco, RedHat, Novell and others
- Secure configuration benchmarks from RedHat, NIST, DISA, CIS, and more
- Any custom content you write that can run in any OVAL-based tool
Test Support by Platform
Widely Deployed
ISVs
SCAP-enabling Mature Product Suites
SaaS
Powering Cloud-based Configuration Assessment
Banks
Continual Vulnerabilty & Baseline Assessments
DoD & DoE
Continuous Configuration Monitoring & Compliance
MSSPs
Delivering Continous Compliance & Security
Content Authors
Testing & Validating Authoritative Content
Simple, Lightweight, Plays Well with Others!
Designed from the ground up to be embedded and/or integrated:
- Zero infrastructure: no databases required!
- Supports remote, local and offline scanning
- Multiple integration points, full-featured public API
- Small footprint: 3.4 MB for entire SDK
- Easily-consumed results: XML, HTML, events stream, custom formats
High-Speed
Scans 100s of devices in parallel and 1000s of devices per hour per Joval instance.
Low-Drag
Minimal resource consumption on target during scan.
Limitless Scalability
Scales horizontally as you deploying additional instances.
Awesome Support
Fast and knowledgable support comes with every Joval purchase, including integration support to make onboarding a snap and incredible same-day help once you're up and running.
Upgrades On Us
Upgrades are included at no extra charge with every Joval license subscription so you know you have the software and support you need to be successful.
