Arctic Wolf Managed Risk vs Tenable Nessus comparison

"I appreciate the professionalism of the tool and have faith in the results it delivers."

"The customer support is incredible."

"There are companies that do vulnerability scans. However, what adds value is when two experts come and sit with you to scan and patch the vulnerabilities. Any 50-member or small company that has an IT footprint carries risk from a cybersecurity perspective. These companies use tools but don't have the talent to leverage them."

"The reporting is really good from what I've seen so far."

"I appreciate the professionalism of the tool and have faith in the results it delivers."

"We have a patch management solution that scans for any patches that can be applied and then applies these patches, but it doesn't hit everything. It also doesn't find all misconfigurations and things like that. Arctic Wolf Managed Risk kind of fills in the gaps and makes us aware of vulnerabilities or misconfigurations that exist out there. It does an agent scan for software versions and compares them to what CVs are out there and lets us know."

"The user-friendly interface and customizable reporting helped our IT team interpret and act on the platform's insights because they did not have any problems using it."

"The user-friendly interface and customizable reporting have helped our IT team interpret and act on the platform's insights."

"Makes ransomware checking and OS auditing and implementation relatively easy."

"The solution is very stable."

"Scanners and reports using CIS templates ("de-facto" standard, easy to fix and to locate correction tips at documentation), tests against cloud providers, database profiles, several types of telecom devices, and others highly customizable scans."

"The most valuable features of Tenable Nessus include its ease of access and quick usability."

"Ease of reviewing scores, identifying vulnerabilities, and getting information on them."

"The scanning and reporting features are the most valuable aspects of Tenable Nessus."

"The reports are pretty nice and easy to understand."

"The value that Tenable Nessus brings to my company is significant because we can see risks; it is also good to see the pages risk and system risks, and it saves money."

"There are some challenges with integrations in Arctic Wolf Managed Risk. Some integrations could be improved to enhance functionality."

"The scalability could improve."

"The best way to take this product to the next level would be to implement a patch management solution."

"The presentation of the data could be improved. I believe they have significant room for improvement, particularly in making better analysis of the vulnerability data and presenting those data more effectively."

"The major area for improvement is the lack of a patch management feature to resolve some of the vulnerabilities detected."

"Arctic Wolf Managed Risk needs to add more integrations."

"It could be easier to use. They could present things in a little bit more ranked order rather than kind of giving you everything out there. It should highlight the really important stuff and make it easier to get to good rather than perfect."

"The major area for improvement is the lack of a patch management feature to resolve some of the vulnerabilities detected."

"From my point of view the solution basically is not for the big enterprise."

"Tenable Nessus is very costly compared to OpenVAS and sits on the higher side."

"The price could be more reasonable. I used the free Nessus version in my lab with which you can only scan 16 IP addresses. If I wanted to put it in the lab in my network at work, and I'm doing a test project that has over 30 nodes in it, I can't use the free version of Nessus to scan it because there are only 16 IP addresses. I can't get an accurate scan. The biggest thing with all the cybersecurity tools out there nowadays, especially in 2020, is that there's a rush to get a lot of skilled cybersecurity analysts out there. Some of these companies need to realize that a lot of us are working from home and doing proof of concepts, and some of them don't even offer trials, or you get a trial and it is only 16 IP addresses. I can't really do anything with it past 16. I'm either guessing or I'm doing double work to do my scans. Let's say there was a license for 50 users or 50 IP addresses. I would spend about 200 bucks for that license to accomplish my job. This is the biggest complaint I have as of right now with all cybersecurity tools, including Rapid7, out there, especially if I'm in a company that is trying to build its cybersecurity program. How am I going to tell my boss, who has no real budget of what he needs to build his cybersecurity program, to go spend over $100,000 for a tool he has never seen, whereas, it would pack the punch if I could say, "Let me spend 200 bucks for a 50 user IP address license of this product, do a proof of concept to scan 50 nodes, and provide the reason for why we need it." I've been a director, and now I'm an ISO. When I was a director, I had a budget for an IT department, so I know how budgets work. As an ISO, the only thing that's missing from my C-level is I don't have to deal with employees and budgets, but I have everything else. It's hard for me to build the program and say, "Hey, I need these tools." If I can't get a trial, I would scratch that off the list and find something else. I'm trying to set up Tenable.io to do external PCI scans. The documentation says to put in your IP addresses or your external IP addresses. However, if the IP address is not routable, then it says that you have to use an internal agent to scan. This means that you set up a Nessus agent internally and scan, which makes sense. However, it doesn't work because when you use the plugin and tell it that it is a PCI external, it says, "You cannot use an internal agent to scan external." The documentation needs to be a little bit more clear about that. It needs to say if you're using the PCI external plugin, all IP addresses must be external and routable. It should tell the person who's setting it up, "Wait a minute. If you have an MPLS network and you're in a multi-tenant environment and the people who hold the network schema only provide you with the IP addresses just for your tenant, then you are not going to know what the actual true IP address that Tenable needs to do a PCI scan." I've been working on Tenable.io to set up PCI scans for the last ten days. I have been going back and forth to the network thinking I need this or that only to find out that I'm teaching their team, "Hey, you know what, guys? I need you to look past your MPLS network. I need you to go to the edge's edge. Here's who you need to ask to give me the whitelist to allow here." I had the blurb that says the plugin for external PCI must be reachable, and you cannot use an internal agent. I could have cut a few days because I thought I had it, but then when I ran it, it said that you can't run it this way. I wasted a few hours in a day. In terms of new features, it doesn't require new features. It is a tool that has been out there for years. It is used in the cybersecurity community. It has got the CV database in it, and there are other plugins that you could pass through. It has got APIs you can attach to it. They can just improve the database and continue adding to the database and the plugins to make sure those don't have false positives. If you're a restaurant and you focus on fried chicken, you have no business doing hamburgers."

"There is room, overall, for improvement in the way it groups the workstations and the way it detects, when the vulnerability is scanned. Even when we would run a new scan, if it was an already existing vulnerability, it wouldn't put a new date on it."

"It would be better if they had application-level support for mobile devices. They don't have anything to scan mobile devices. Tenable Nessus doesn't have a mobile application vulnerability assessment. I also have issues with the false positive rates. The product has limited features."

"Model OS costs (and its segregation schema for individual modules)."

"I would like to see an improvement in the ranking of high, medium and low vulnerability."

"In Nessus Professional, the main drawback was that we could have a single-user login password. So it could be better in terms of security."

"The price of Arctic Wolf Managed Risk is reasonable compared to the competition."

"It depends on the company size quite a bit."

"Arctic Wolf Managed Risk is reasonably priced and I rate it a four out of ten."

"We paid about six thousand dollars per license."

"The price is okay. I would give it a seven out of ten, where one is cheap and ten is expensive."

"We pay approximately $2,500 on a yearly basis."

"The price of Tenable Nessus could improve, it is expensive."

"Nessus is affordable, but its licensing model could be improved with more flexibility for adding assets."

"Tenable Nessus needs to be licensed. We own a license for the security center and that license is charged by the number of IP addresses that you can scan. You're allowed to have as many scanners as you want and there's no license for the number of scanners. We have a bunch of Nessus scanners out there, and as long as we're comfortable with staying under that IP address limit, that's really all we have to be concerned about."

"The price of the solution is reasonable."

"The product is free."