

Find out what your peers are saying about SecurityScorecard, BitSight, OneTrust and others in IT Vendor Risk Management.
This resulting in a lower insurance premium cost for us and considerable cost savings overall, which made our management very pleased with the progress.
The biggest benefit is visibility, allowing organizations to understand their risks, vulnerabilities, and potential threats.
We have seen a clear return on investment, and in terms of the metrics, the time saver is in the reduction of time spent.
They need better organization to support their customer volume.
they continue to assist us with bi-monthly sync-up calls whenever we face issues with the platform regarding risk and how to improve our security score
I would rate the customer support for SecurityScorecard nine out of 10.
We received support within one to three hours.
Whenever any issue arises, we contact the support, and they are always there for us.
The technical support is good yet could improve in terms of response time.
The product is suitable for medium to large businesses, typically with a revenue range from $200 million to a couple of billion dollars.
My experience with SecurityScorecard is that it is highly scalable and can handle more vendors or users as my organization grows.
Whether managing 50 servers today or 500 tomorrow, performance or capacity are not hindered.
Tenable Nessus is definitely scalable, especially for license formats designed for scalability.
I find SecurityScorecard stable for our organization, as I have not encountered any downtime.
We have not encountered any issues with missing network items or errors in API and webhook interactions.
The stability of Tenable Nessus is extraordinary.
There is a need for more active rather than passive third-party risk management features to truly mitigate risks.
SecurityScorecard could enhance some of the integrations based on AI platforms, where I could receive suggestions from the AI tool regarding why SecurityScorecard rates specific issues as critical or high.
If SecurityScorecard could help their customers internally by developing their tool or feature so that customer devices that are not only public-facing can be monitored, it would be more beneficial.
This is Tenable's property. They want to sell Tenable Security Center, and they closed all the API capability for Tenable Nessus Professional.
The documentation is not well-organized, which can be confusing when searching for solutions or specific information related to Tenable Nessus Professional.
The product's pricing has roughly tripled within the last couple of years, making us reconsider renewing the license for the scanner.
There are more expensive and cheaper options available.
I expected slightly lower pricing.
Pricing is acceptable as per the Indian market.
The pricing for Tenable Nessus has increased significantly, tripling over the last few years.
Tenable Nessus's pricing is adequate if it is fully utilized.
My experience with the pricing, setup cost, and licensing of Tenable Nessus is that the installation is somewhat easier, but preparing the product, such as the SKU and license options, is quite tricky.
It combines threat intel data with vulnerability information to increase risk ratings and provides insights into third-party supply chain risks.
I particularly value the Jira integration, so any issue identified as part of the threat intel activity can be directly updated through our Jira.
It converts complex security issues into business-friendly language, which helps executives and the board understand cyber risk.
I mostly use the configuration audit feature for the audit configuration as a scan policy, and I will use it for credential audit, which helps me scan credentials access such as local administrator or root access, performing a deeper and more accurate check of local configuration settings and file systems, making it a highly recommended feature.
The scanning and reporting features are the most valuable aspects of Tenable Nessus.
The most valuable features of Tenable Nessus include its ease of access and quick usability.
| Product | Market Share (%) |
|---|---|
| SecurityScorecard | 8.1% |
| OneTrust GRC | 8.3% |
| RSA Archer | 8.0% |
| Other | 75.6% |
| Product | Market Share (%) |
|---|---|
| Tenable Nessus | 5.2% |
| Wiz | 7.5% |
| Qualys VMDR | 5.0% |
| Other | 82.3% |

| Company Size | Count |
|---|---|
| Small Business | 7 |
| Midsize Enterprise | 5 |
| Large Enterprise | 2 |
| Company Size | Count |
|---|---|
| Small Business | 39 |
| Midsize Enterprise | 19 |
| Large Enterprise | 35 |
SecurityScorecard provides comprehensive cybersecurity insights with features such as notifications for score changes and configurable reporting, supporting team collaboration. It emphasizes multi-factor authentication and continuous monitoring for improved risk assessments.
SecurityScorecard specializes in assessing third-party cybersecurity risks, enhancing security posture, and analyzing exposed data. It offers automated information gathering and vendor reports, aiding in vulnerability assessments for supply chain risk management. Users value the Attack Surface Index and recommendations for security improvements, though faster technical response times and better cost-effectiveness, especially in Brazil, are desired. Enhancements such as app scanning and more efficient vulnerability management could expand its capabilities.
What are the key features of SecurityScorecard?SecurityScorecard is utilized in industries for managing third-party cybersecurity threats by providing detailed vulnerability assessments and automated reporting. Its implementation aids supply chain risk management and enhances industry-specific security strategies, with room for improvement in technical response times and dark web intelligence inclusion.
Tenable Nessus provides an efficient vulnerability management system with swift deployment and comprehensive scanning capabilities, making it an ideal choice for organizations seeking to enhance their security posture through effective threat detection and mitigation strategies.
Renowned for its top-tier vulnerability detection, Tenable Nessus offers a robust platform that integrates effortlessly across systems, enhancing threat management through automation, real-time monitoring, and customizable scanning options. Its broad asset coverage, including network devices and applications, coupled with ease of deployment, positions it as a go-to option for risk assessment and compliance. Organizations value its extensive reporting features and database, although they suggest enhancements in reporting formats and false positive detection. A more intuitive interface, improved cloud support, and competitive pricing models are sought after to cater to evolving enterprise needs.
What are the key features of Tenable Nessus?In industries such as finance, healthcare, and tech, Tenable Nessus is implemented for scanning internal and external networks, identifying risks, and ensuring data protection compliance. Organizations conduct regular scans to detect security vulnerabilities in servers and databases, leveraging its capabilities to strengthen their security frameworks while managing cloud infrastructures and enterprise networks efficiently.
We monitor all IT Vendor Risk Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.