At the heart of Nessus are its plugins—small scripts written in Nessus Attack Scripting Language (NASL) that check for specific vulnerabilities.