Try our new research platform with insights from 80,000+ expert users

Fortinet FortiWeb vs Tenable.io Web Application Scanning comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Fortinet FortiWeb
Average Rating
7.8
Number of Reviews
90
Ranking in other categories
Web Application Firewall (WAF) (4th)
Tenable.io Web Application ...
Average Rating
7.6
Number of Reviews
15
Ranking in other categories
Application Security Tools (21st)
 

Mindshare comparison

Fortinet FortiWeb and Tenable.io Web Application Scanning aren’t in the same category and serve different purposes. Fortinet FortiWeb is designed for Web Application Firewall (WAF) and holds a mindshare of 8.4%, up 7.4% compared to last year.
Tenable.io Web Application Scanning, on the other hand, focuses on Application Security Tools, holds 1.3% mindshare, down 1.7% since last year.
Web Application Firewall (WAF)
Application Security Tools
 

Featured Reviews

Kacem CHAMMALI - PeerSpot reviewer
Apr 1, 2024
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.
Harshal Deshmukh - PeerSpot reviewer
Jul 12, 2024
Simple tool to use, good dashboard capabilities and offers asset criticality ratings
It's nice to work with because it gives good results for web application scanning according to OWASP Top 10 and NISC. It's also a very simple tool to use It supports cybersecurity strategy. For me, it works. AndI sell this tool to my customers, and they are also happy with it. It has good…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is easy to install and to maintain."
"It's easy to use and allows us to integrate solutions together."
"The GUI makes it easy to scale in terms of learning and utilization."
"We were able to protect our web servers from outside attacks."
"The anti-defacement feature is very useful because it looks for web changes over time to protect pages."
"The most valuable feature of Fortinet FortiWeb is the ease of integration and configuration."
"I like FortiWeb's usability and ease of configuration. It's simple to configure rules and exceptions inside the attack log. We block everything by default. If something isn't working, we ask the system admin to adjust the template and add exceptions."
"FortiGate is a stable product."
"Our customers adopt this solution because of the replication testing and the vulnerability assessment it can do. It is a multi-faceted product."
"It collects the vulnerabilities on the hostnames and sends them to the Tenable.io cloud. Tenable has its own cloud where Tenable.io is running, but there are many connectors to other cloud solutions. Tenable can do vulnerability scanning for other cloud managers such as Azure, Amazon, and so on."
"The most valuable feature is the reporting, which provides a good level of detail with respect to vulnerabilities."
"The most valuable features of Tenable.io Web Application Scanning are the integration into specific use cases and scanning. All of the features of the solution are useful."
"All the features are valuable to us as they offer cutting-edge scanning methods and address the latest issues with a contemporary approach. Tenable.io Web Application Scanning is highly stable. I rate it a nine out ten. Since the solution works on the Cloud, it's highly scalable. I rate the scalability a nine out of ten. The setup of the solution is straightforward. The Return on Investment is substantial. I recommend the solution to all."
"The most effective feature of the product is the ability to scan the entire environment."
"The initial setup is straightforward."
"It has good unified web application scanning and exposure management."
 

Cons

"The reporting could be optimized."
"We would like the interface to be easier to use and more user-friendly. The interface needs to be enhanced."
"Fortinet's technical support is pretty slow."
"It would also be helpful if they could introduce easier reporting. It's good to have those reports that go to C-level management, and Fortinet does provide some graphs, but if they went into some more detail, that would be great."
"I would like to see more improvements with respect to threat intelligence."
"The memory use in each of the appliances is problematic."
"F5 and some other firewalls are easier to customize. FortiWeb could be more flexible and customizable. The documentation could also be improved because many of the advanced features aren't fully documented."
"We would like to know more about the integration with the hardware or security products, such as Gemalto, because we need to move to that point."
"The technical support should be improved. Currently, some attacks are detected while others are not."
"The cloud and the on-premises versions have their own controllers, and there is no way to centrally manage controllers."
"The report customization needs to be better."
"The reporting has a very limited customization capability."
"The platform's technical support services could be better."
"The solution's dashboards could be improved and made more user-friendly."
"I would like for them to add proxy filtering, where you can transfer and alter the package. It is fully automated. Other web application testers programs are actually proxy software, and the proxy software gives you the flexibility of modifying the outgoing package, which will actually help you in exploiting any vulnerability in detail."
"Tenable.io Web Application Scanning could improve by offering faster fuzzing."
 

Pricing and Cost Advice

"The price is competitive."
"Fortinet FortiWeb's pricing is reasonable. Its licensing costs are yearly."
"So far, I have been pretty pleased with the way it's priced and licensed. The way it's done makes it easy, especially for an organization like us, so I've been pleased with the way it's priced and licensed right now."
"The price of Fortinet FortiWeb depends from customer to customer because some customers are considering using other solutions, such as Imperva. The price of Fortinet FortiWeb sits well for the middle-sized customers that we deal with."
"FortiWeb offers these services at a price that SME customers can afford, but it's also suitable for large enterprises. Still, they need to put in more work to gain a greater share of enterprise business because they face stiff competition in this segment from F5, Cloudflare, and some others."
"There are no costs in addition to the standard licensing fees."
"The solution is a bit expensive when compared to other products."
"The license cost depends on the size of the box or the size of the solution. It can go from €200 Euros to a few hundred thousand Euros a year depending on your size."
"The application is extremely affordable. There are no additional costs involved with licensing. We switched to Tenable.io Web Application Scanning from other solutions due to pricing."
"The price of the solution is reasonable compared to the competitors. The license cost is based on the number of users and the annual usage."
"For Tenable.io Web Application Scanning, it comes to around 6,50,000 Indian rupees, plus taxes."
"The pricing is okay."
"I rate the product's pricing a four out of ten."
"It follows the same licensing scheme as Tenable.io and Tenable. sc."
"Tenable.io Web Application Scanning is expensive for small businesses."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
814,572 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
42%
Computer Software Company
10%
Financial Services Firm
7%
Government
5%
Computer Software Company
16%
Financial Services Firm
13%
Government
12%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
FortiWeb is cheaper by over ten percent compared to other solutions like Barracuda and F5.
What needs improvement with Fortinet FortiWeb?
One area that needs improvement is the handling of SaaS downtime. When there is downtime at their data center, it becomes a transit point issue for us, causing downtime in our environment as well. ...
What do you like most about Tenable.io Web Application Scanning?
The most effective feature of the product is the ability to scan the entire environment.
What needs improvement with Tenable.io Web Application Scanning?
We would like some additional features. Sometimes it lags with different cloud environments. Private clouds are becoming more common, and the integration lags with those compared to AWS, Azure, or ...
What advice do you have for others considering Tenable.io Web Application Scanning?
Overall, I would rate it an eight out of ten. We deploy it for customers, and it's very easy to deploy. Some people are worried about the cost, but we try to sell it at a good rate, less than the o...
 

Learn More

 

Overview

 

Sample Customers

Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
IMDEX
Find out what your peers are saying about Amazon Web Services (AWS), Microsoft, F5 and others in Web Application Firewall (WAF). Updated: October 2024.
814,572 professionals have used our research since 2012.