Some sites may be better off using ESnet, particularly is they run business and scientific data on the same net rather than different nets. Tracks the state systems are in. How to get patches installed on vulnerable systems. There is a lightweight process on each machine. There is a patch database keeping track of those supplied by vendor.
Patches are in a standard format so it is operating system independent.
Right now they only support Sun. Currently at the point where they can evaluate what is on the system and have database of 900 Sun security patches. They expect to be able to interact with vendor patch management systems. Changing modes of operations Number of site scans increasing. Correlation of scans and break-ins.