Download NESSviewer

14-day free trial, no license key required to start.

Beta

NESSviewer 0.0.15

Posted

Feature-complete and in testing. Includes the baseline module.

Download: Windows
Windows
NESSviewerMAUI_0.0.15.0_x64.zip · 114.6 MBSHA-256 7A9D6ADE1A47E8993D8B8671643F85E38A0F46C7E75512755F5C9A93F629918F
Requirements
Windows 10 (1809 or later), Windows 11, or Windows Server 2019 or later. x64

What’s changed

eMASS POA&M: 2026 template

eMASS changed its POA&M export template. NESSviewer reads both the old and the new layout, and writes the new one.

  • Import accepts either generation. "Vulnerability Description" and "Resources" are recognised alongside the old "Control Vulnerability Description" and "Resources Required", and a POA&M is now identified by POA&M Item ID + Security Checks + POA&M Status, so the rename cannot stop a file being recognised.
  • Export (POA&M Update and the generated POA&M report) matches the 2026 template column for column: Summary, Date Identified and Actual Cost added; POA&M Status moved to the front; Milestone Status before Milestone Description; Comments after Office/Org; Resources and Actual Cost last. The info block uses the new positions and labels ("CC/S/A/FA", "DoW IT Registration No"), and the hidden validation lists match the template.
  • Summary carries the finding title; Vulnerability Description is the plain description text.
  • Labels throughout the POA&M pages use the template's wording.

Loading scans

  • Duplicate scans are loaded once. A folder holding a .zip together with its extracted .nessus files (or a copy in a subfolder) used to load every scan twice or three times. Scans are now matched by content, not path; identical copies are skipped and listed in the load dialog with both paths.
  • Files that fail to load are named, with the reason, in one dialog. A deleted recent file is reported and removed from the recent list. Dropped files of an unsupported type are named rather than ignored.

Reports

  • The POA&M Status and Remediation Plan report sections now contain the loaded POA&M and remediation plans. Both were empty in every previous build.

Reliability

  • Pending edits in the Software List, Ports List, Baseline and Remediation Plan editors are saved before the window closes. Previously an edit made in the last second before closing was lost.
  • Unhandled errors are written to %TEMP%\nessviewer-crash.log. If the application closes unexpectedly, send that file.
  • Startup is faster: the Files page builds its Baseline, POA&M and Remediation tabs on first use rather than at launch.

Licence

  • The End-User Licence Agreement is version 1.1. Every user is asked to accept it once on the next start.

Housekeeping

  • Legacy test-plan and POA&M loaders that had been unreachable since the kits took over are removed.
  • Framework and component updates (.NET MAUI 10.0.101, Telerik UI for MAUI 15.0.0, Telerik Document Processing 2026.3.826).

Current release

NESSviewer 1.0.8

Posted

The shipping release. It does not include the baseline module, which arrives with the beta.

Download: Single-file EXEDownload: MSIX
Single-file EXE
NESSviewer-1.0.8-x64.zip · 12.3 MBSHA-256 11D3E426011CDD08D0ADA351F62B081A2D716A3BAC5FB138A4D6ED78B8C1C8E7
MSIX
NESSviewerMSIX_1.0.8.0_x64.zip · 24.9 MBSHA-256 90D1E6018771116E495950ABB3FE9CABF9ED814ABE0BBA4FBB6E096DEDCB50E8
Requirements
Windows 7, 8, 10, 11; Server 2012, 2016, 2019, 2022. .NET Framework 4.6 or higher

What’s changed

eMASS POA&M

  • 2026 eMASS POA&M template supported. NESSviewer now imports POA&M exports in both the new 2026 layout and the older layout.
    • The renamed columns ("Vulnerability Description", "Resources") are recognized automatically.
    • All 36 columns are now read. Before, the last three (Recommendations, Resources and Actual Cost) were dropped.
  • POA&M export matches the 2026 template.
    • Exported POA&Ms use the template's column order and header wording, with headers on row 7.
    • The 2026 information block is included, along with the template's risk level and milestone status lists.
    • A saved grid layout no longer changes the column order of the exported file.
  • Protected workbooks no longer need Microsoft Excel. When a spreadsheet is protected or marked as final, NESSviewer can now remove the protection itself. If that isn't possible, it tells you how to fix the file in Excel (click Enable Editing, then save).
  • Fixed: answering No to "Remove Protection" crashed NESSviewer. It now just cancels the load.
  • Fixed: the Hostnames and Descriptions Excel imports crashed when a workbook couldn't be opened, for example because it was open in Excel. They now show a message and stop.

File loading

  • Recent files on the POA&M, Test Plan and Remediation Plan tabs. A new dropdown button next to each file path lists the last 8 files you loaded there. Click an entry to load it again.
    • To remove an entry, right-click it and choose Delete, or highlight it and press the Delete key.
    • If a file has been moved or deleted, NESSviewer tells you and removes it from the list.
    • On the Test Plan tab, Save As also adds the new file to the list.
  • New Clear (X) button on the same three tabs. It unloads the current file and returns the findings to their "not loaded" state:
    • POA&M status returns to "No POA&M Loaded", or to the business-rule status if you enforce POA&M rules.
    • "In Testplan?" returns to "No Testplan Loaded", and the dashboard's Test Plan indicator resets.
    • The remediation columns return to "No Remediation Plan Loaded".

    Your recent-files list is kept, so you can load the same file again with one click.

  • Remediation plans: a plan file that can't be read now shows an error message. It no longer fails silently or becomes the current plan.
  • Fixed: with "load on open" turned on and no POA&M file saved, NESSviewer crashed at startup. It now skips the load.

Software tab

  • The software list now uses the CPE (Common Platform Enumeration) data in your scans instead of a built-in plugin list, so new products are detected automatically.
  • A new Version column shows each item's version where it can be found.
  • Linux package names no longer include the extra detail the scan appends, so the same package groups together across scans.
  • The Red Hat package-list header no longer shows up as a software entry.

More on NESSviewer