Try our new research platform with insights from 80,000+ expert users

HackerOne vs Tenable Nessus comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 14, 2024
 

Categories and Ranking

HackerOne
Ranking in Vulnerability Management
42nd
Average Rating
8.6
Number of Reviews
4
Ranking in other categories
Application Security Tools (34th), Bug Bounty Platforms (1st), Penetration Testing Services (2nd), Attack Surface Management (ASM) (12th)
Tenable Nessus
Ranking in Vulnerability Management
1st
Average Rating
8.4
Number of Reviews
77
Ranking in other categories
No ranking in other categories
 

Featured Reviews

VS
Sep 16, 2024
They have streamlined the complete process, which gives a sense of security to the users
I mainly use it for downtime activities, earning extra cash alongside a full-time job, and to get new sales and profits It helps me to get new sales, profits, and other benefits. The main thing I like about HackerOne is that it provides a direct way to contact the program directly without the…
AG
Apr 11, 2023
You can customize the tool to scan exactly what you want
My favorite part about Nessus is that you can customize the tool to scan exactly what you want. Microsoft releases new patches monthly on Patch Tuesday, and a lot of companies track that date. I set up Nessus for the day after Patch Tuesday to see which devices have already pushed those updates from Microsoft, so we can stay updated. Tenable stays on top of new IT trends in vulnerability management because there's constant innovation. They keep up with the industry. In the past few years, everything has shifted to cloud-based servers. It's a long-term trend that COVID accelerated. Tenable came out with a tool for that.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Apart from getting all the bug bounty opportunities, we also get the chance to practice in a safe environment, like a demo setup. These features are great for beginners who want to explore bug bounties in the future."
"The most valuable feature of HackerOne is its variety of programs. These programs provide depth into various areas, such as mobile, API, and websites."
"It helps me to get new sales, profits, and other benefits."
"I have found the vulnerability assessment and the reports to be useful."
"The scanning capabilities are most valuable when compared to Nessus."
"Nessus is good at finding out what nodes you have in place. It will then provide you a report, by node, of what the vulnerabilities are. It does it quickly and stealthfully."
"User friendly and good dashboards."
"The solution is very stable."
"It provides multiple recommendations towards the remedy of vulnerabilities."
"Ease of reviewing scores, identifying vulnerabilities, and getting information on them."
"The automatic scanner and scheduler are pretty cool."
 

Cons

"Response time can be improved. The HackerOne Trust team can be slow to respond sometimes. They're not using AI, which could help reduce the number of duplicate reports."
"One issue I've experienced is traffic. Many people try to participate when an opportunity with a bounty of around 1,000-15,000 dollars comes up. In this case, the first person to report the vulnerability gets the bounty. If a second person reports the same vulnerability, they are marked as duplicated instead of receiving some recognition. The second person also invested time finding the issue, so I think this can be improved."
"The ability to view the conversation between the triagers and the programs will be really good."
"Tenable Nessus application device assessment is one of the top tools. However, in the application security assessment, there are other tools that provide better, and more accurate findings."
"In Nessus Professional, the main drawback was that we could have a single-user login password. So it could be better in terms of security."
"Some things in the user interface could be better. The user interface could allow more adjustments to plugins. The price could also be better."
"The problems I faced with Tenable Nessus were related to its dashboard's customization capabilities and its ability to provide data to third-party sources."
"In terms of what could be improved, I would say its reporting portion."
"The professional version is not very scalable."
"I have found it is sometimes difficult to control the Zoom meeting sessions. For example, it is difficult to know who is talking and when trying to mute everyone but the speaker you end up muting everyone. When using multiple screens it is laborious to find the control buttons, such as to start a session. Additionally, when a recording is done I have found it difficult to find them, there should be an easier way to retrieve them."
"The solution could improve security updates."
 

Pricing and Cost Advice

"The tool is open-source and free for bug bounty hunters."
"The solution is free."
"The is a free version of Tenable Nessus available."
"The cost is around $4,300 per year. Use is unlimited. You don't pay more if you want to use it for another IP."
"We have a subscription, the licensing fees are paid yearly, and I am using the latest version."
"Our organization is huge so our license costs $30,000."
"I think the price is fairly affordable. It provides a license that is fair."
"I would like to see better discounts."
"The price of Tenable Nessus could improve, it is expensive."
"Tenable Nessus needs to be licensed. We own a license for the security center and that license is charged by the number of IP addresses that you can scan. You're allowed to have as many scanners as you want and there's no license for the number of scanners. We have a bunch of Nessus scanners out there, and as long as we're comfortable with staying under that IP address limit, that's really all we have to be concerned about."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
805,335 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Manufacturing Company
12%
Financial Services Firm
11%
Comms Service Provider
7%
Educational Organization
38%
Computer Software Company
10%
Government
7%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What needs improvement with HackerOne?
Response time can be improved. The HackerOne Trust team can be slow to respond sometimes. They're not using AI, which could help reduce the number of duplicate reports.
What is your primary use case for HackerOne?
I use the tool for vulnerability assessment and testing.
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. You can easily prioritize vulnerabilities using attacker analytics. Overall, Rapid...
What's the difference between Tenable Nessus and Tenable.io Vulnerability Management?
Tenable Nessus is a vulnerability assessment solution that is both easy to deploy and easy to manage. The design of the program is such that if a company should desire to handle the installation t...
What do you like most about Tenable Nessus?
We have around 500 virtual machines. Therefore, we conduct monthly scans and open tickets for our developers to address identified vulnerabilities. These scans cover the servers, other network equi...
 

Comparisons

 

Also Known As

HackerOne Assets, HackerOne Pentesting Services, HackerOne Security Assessments, HackerOne Vulnerability Management
No data available
 

Learn More

 

Overview

 

Sample Customers

Zenefits, Adobe, Yelp
Bitbrains, Tesla, Just Eat, Crosskey Banking Solutions, Covenant Health, Youngstown State University
Find out what your peers are saying about HackerOne vs. Tenable Nessus and other solutions. Updated: September 2024.
805,335 professionals have used our research since 2012.