Free tool · no account
Free vulnerability scan file checker
Drop in a Nessus, Qualys, Rapid7, OpenVAS or Nuclei export and see, in seconds, whether it can be read, what it holds and what it leaves out. Nothing is stored and no AI reads it.
What the check shows
- Whether Scan Hub can write a report from the file, and if not, why not
- Which scanner and format produced it
- How many records, findings and hosts it holds
- What the file leaves out, such as findings without a CVE or rows that can't be read
Why check before you report
A report is only as good as the export behind it. An export without CVEs, a scan that covered half the network, or a file cut short by a download error all produce a report that looks complete and isn’t. The check tells you before you send anything to a client.
When the file is good, sign up and upload it to get the full report: findings ranked by CISA KEV, EPSS and CVSS, a plain-language fix plan and the evidence behind every line.
Common questions
- How do I open a .nessus file without Nessus?
- A .nessus file is XML, so any text editor opens it, but it is hard to read that way. The free check reads it for you and shows how many hosts and findings it holds, and Scan Hub can turn it into a readable PDF report.
- Is my scan file stored?
- No. The file is read in memory, summarised on screen and discarded. No account is needed, no report credit is used and no AI reads it.
- Which files can I check?
- Exports from Nessus, Qualys, Rapid7 InsightVM or Nexpose, Greenbone / OpenVAS and Nuclei, and other network, host or web vulnerability scanners' CSV, XML or JSON exports, up to 100 MB.
- What if the check says it can't read my file?
- The result says why, for example a format that isn't a findings export or a file that was cut short. Re-export in a supported format and check again. If a report can't be written from a file after you upload it, the credit is refunded.