Knocker is a simple and easy to use TCP security port scanner written in C to analyze hosts and all of the different services started on them. It is available for Linux, FreeBSD, HP-UX, and Windows9x/2000/NT and it is licensed under the GNU General Public License GPL.

Website: http://knocker.sourceforge.net/index.php

How Does it Work:
The Secunia Software Inspector relies on carefully crafted “Secunia File Signatures” to recognise applications on your system. The detected applications are then matched against our “Secunia Advisory Intelligence” to determine whether an application is up-to-date or not. The results are then used to advise you on how to update to more secure releases of the insecure applications.

Microsoft Windows Update is used to determine if your system is missing security updates from Microsoft.

The Secunia Software Inspector covers the most common/popular end user applications:
* Internet browsers
* Internet browser plugins
* Instant messaging clients
* Email clients
* Media players
* Operating systems

You can get the online version without having to download anything from here:
http://secunia.com/software_inspector/

Or you could get the beta software version from here for free called PSI:
https://psi.secunia.com/

Highlights of The Secunia PSI:

• The Secunia PSI will be available free of charge
• Calculates your unique Secunia System Score
• Automatically scans your computer
• Enables you to update Insecure/End-of-Life software
• Provides Direct Download Links to security updates & patches
• Detects and advises on more than 4,700 applications
• Direct correlation between thousands of Secunia Advisories and your specific system and software
• Secure SSL encrypted connection to Secunia

Minimum Requirements:
* Windows 2000 SP4, Windows XP SP2, Windows 2003, or Windows Vista
* Sun Java JRE 1.5.0_12 or later
* Internet Explorer 6.x/7.x, Opera 9.x, or Firefox 2.x
* Latest version of Microsoft Windows Update

Overview:

After a 7 minute scan PSI gave me a nice list of insicure software:

And a list of end of life software:

You can get a direct download link by clicking the blue download button on the side. Or and overview by clicking on the green overview button.

Here is the Adobe flash player overview screenshot, it gives a detailed information about the software, the update and its solution:

It’s an interesting tools to have for free. There are other commercial alternatives out there.
Visit there website: http://secunia.com/

SSA (Security System Analyzer) is free non-intrusive OVAL-Compatible software. It provides security testers, auditors with an advanced overview of the security policy level applied.

Features :

• OVAL-compatible product
• SCAP (Security Content Automation Protocol)
• Perform a deep inventory audit on installed softwares and applications
• Scan and map vulnerabilities using non-intrusive techniques based on schemas
• Detect and identify missed patches and hotfixes
• Define a patch management deployment strategy using CVSS scores

WHAT IS OVAL ?

Open Vulnerability and Assessment Language (OVAL) is an international, information security, community standard to promote open and publicly available security content, and to standardize the transfer of this information across the entire spectrum of security tools and services.
OVAL includes a language used to encode system details, and an assortment of content repositories held throughout the community. The language standardizes the three main steps of the assessment process: representing configuration information of systems for testing; analyzing the system for the presence of the specified machine state (vulnerability, configuration, patch state, etc.); and reporting the results of this assessment. The repositories are collections of publicly available and open content that utilize the language.

Website: http://www.security-database.com/ssa.php