Is there currently a owners for TARA or Tiger security tools? TARA is owned by Advanced Research Corporation and Tiger's support lists are not active. Are either of these tools worth maintaining or updating? The reason I ask is because I will be starting a Senior capstone class for college soon and was wondering how useful would a tool like TARA/Tiger be to the Open Source community. I invision it as a client-server application where either the client or server can initiate a scan and the results would go into a database (MySQL or PostgreSQL). From the DB risk acceptance filters could be applied and reports (Web & email) could be generated. A web interface could generate reports for each site or support region. This could be used by managment to see how security compliant a given region is. The DB could also have tables in it to support determining how patch compliant systems are. I would like the DB flexable enough to support other security concerns in the furture. I would like to hear your thoughts on how useful this would be before I spend a lot of time working on it. Of cource it also comes down to if the professor will accept it as a project. -- Jamie Bohr