A securitypipline article caught my eye today. It is well-written and covers the need for a vulnerability assessment scanner. It is a good general survey, and goes well in enforcing some things I've discussed in the past, including Using Network VATs for Verification, Beyond the VA Scan, and Basic IP Router Security.

But, I wonder if the article is not a verification itself of what I said in Security Redux?