managing/filtering/searching security alerts for multiple OS's

[bergman@merctech.com]

I'm looking for a solution to correlate the multiple sources of security 
alerts, such as bugtraq, nt-bugtraq, vendor lists, etc. against the inventory 
of machines that we manage (linux, bsd, Solaris, NT, Win2K, HP, AIX).

We're considering the vulnerability database service offered by 
eSecurityOnline.com, but we have a number of issues with their product.

Does anyone have experience with a comparable vendor, or have you developed 
your own database & way of classifying and managing the stream of alert data 
from various sources?

I'll summarize any responses back to the list.

Mark