Whats the difference between it and COPS?
COPS is a host-based Un*x security auditing tool; that means you run it on the host you wish to examine the security of. SATAN is a remote network security auditing tool, which means it can report on the security of any host OR network that has IP connectivity to where you run the tool; you don’t need an account or privileges on the remote targets to report on them.