Try our new research platform with insights from 80,000+ expert users

Snyk vs Tenable Nessus comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Snyk
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
44
Ranking in other categories
Application Security Tools (4th), Container Security (7th), Software Composition Analysis (SCA) (3rd), Software Development Analytics (2nd), DevSecOps (1st)
Tenable Nessus
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
80
Ranking in other categories
Vulnerability Management (1st)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Snyk is designed for Application Security Tools and holds a mindshare of 7.6%, down 8.2% compared to last year.
Tenable Nessus, on the other hand, focuses on Vulnerability Management, holds 12.6% mindshare, down 15.3% since last year.
Application Security Tools
Vulnerability Management
 

Featured Reviews

Jayashree Acharyya - PeerSpot reviewer
Used for image scanning and identifying vulnerabilities, but its integration with other services could be improved
The solution has improved or streamlined our process a lot for securing container images. We wanted to make sure we are deploying the secure Docker images. Snyk allowed us to check whether it is following our standard of docker images or not. We use Azure DevOps as our platform, and Snyk's integration with Azure DevOps was okay. However, Snyk's integration with JFrog Artifactory didn't go well. We use JFrog Artifactory to store the artifacts we download. We wanted to integrate Snyk with JFrog Artifactory to scan the binary artifacts we downloaded, but that broke our JFrog Artifactory for some reason. Instead of using it there, we are calling it directly from the pipeline. Snyk's automation features significantly reduced remediation times a couple of times. Sometimes, our developers scan the code from the environment and find some Java vulnerabilities. We fixed those vulnerabilities in the lower environment itself. The solution does not require any maintenance. The accuracy of Snyk's vulnerability detection is pretty good compared to other tools. I rate the solution's vulnerability detection feature an eight out of ten. I would recommend Snyk to other users because it is easy to implement and integrate with Azure DevOps and GitHub. Overall, I rate the solution a seven out of ten.
Matthew Weisler - PeerSpot reviewer
Unlimited assets for one price and quick, agentless results
The solution has a single price for unlimited assets. Value wise, the solution is also great for pen testers and consultants. The solution is useful for vulnerability and patch management from both the internal and public facing sides. Quick assessments, compliance scores, and results are provided without having to do agents.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product's most valuable features are an open-source platform, remote functionality, and good pricing."
"Snyk performs software composition analysis (SCA) similar to other expensive tools."
"The CLI feature is quite useful because it gives us a lot of flexibility in what we want to do. If you use the UI, all the information is there and you can see what Snyk is showing you, but there is nothing else that you can change. However, when you use the CLI, then you can use commands and can get the output or response back from Snyk. You can also take advantage of that output in a different way. For the same reason, we have been using the CLI for the hard gate in the pipeline: Obtain a particular CDSS score for vulnerability. Based on that information, we can then decide if we want to block or allow the build. We have more flexibility if we use the CLI."
"The advantage of Snyk is that Snyk automatically creates a pull request for all the findings that match or are classified according to the policy that we create. So, once we review the PR within Snyk and we approve the PR, Snyk auto-fixes the issue, which is quite interesting and which isn't there in any other product out there. So, Snyk is a step ahead in this particular area."
"Snyk is a good and scalable tool."
"Snyk helps me pinpoint security errors in my code."
"I think all the standard features are quite useful when it comes to software component scanning, but I also like the new features they're coming out with, such as container scanning, secrets scanning, and static analysis with SAST."
"Snyk has given us really good results because it is fully automated. We don't have to scan projects every time to find vulnerabilities, as it already stores the dependencies that we are using. It monitors 24/7 to find out if there are any issues that have been reported out on the Internet."
"Scanners and reports using CIS templates ("de-facto" standard, easy to fix and to locate correction tips at documentation), tests against cloud providers, database profiles, several types of telecom devices, and others highly customizable scans."
"Easy to set up vulnerability scanner with good stability and a responsive technical support team."
"We have done code scanning for a long period because as a company, we do DevOps as part of our development life cycle."
"The features of Tenable Nessus that I have found most valuable are its reliability and its ability to collate a dependable output, where we are able to get the same vulnerability when we test manually. The output is quite reliable."
"My favorite part about Nessus is that you can customize the tool to scan exactly what you want. Microsoft releases new patches monthly on Patch Tuesday, and a lot of companies track that date. I set up Nessus for the day after Patch Tuesday to see which devices have already pushed those updates from Microsoft, so we can stay updated."
"Once you get past the initial implementation, the solution is very stable."
"The automatic scanner and scheduler are pretty cool."
"Security is the key number because it can start to scan with a few clicks instead of credits, which is a bit complicated. So simplicity is the first advantage. Then the generated reports are well done and easy to present to management. The quality of the scan is quite good in detecting the severity. The solution has simplicity. Also, it has frequent updates so that is also a valuable feature."
 

Cons

"Basically the licensing costs are a little bit expensive."
"The tool's initial use is complex."
"Snyk's API and UI features could work better in terms of speed."
"I use Snyk alongside Sonar, and Snyk tends to generate a lot of false positives. Improving the overall report quality and reducing false positives would be beneficial. I don't need additional features; just improving the existing ones would be enough."
"All such tools should definitely improve the signatures in their database. Snyk is pretty new to the industry. They have a pretty good knowledge base, but Veracode is on top because Veracode has been in this business for a pretty long time. They do have a pretty large database of all the findings, and the way that the correlation engine works is superb. Snyk is also pretty good, but it is not as good as Veracode in terms of maintaining a large space of all the historical data of vulnerabilities."
"The solution could improve the reports. They have been working on improving the reports but more work could be done."
"It can be improved from the reporting perspective and scanning perspective. They can also improve it on the UI front."
"Because Snyk has so many integrations and so many things it can do, it's hard to really understand all of them and to get that information to each team that needs it... If there were more self-service, perhaps tutorials or overviews for new teams or developers, so that they could click through and see things themselves, that would help."
"In Nessus Professional, the main drawback was that we could have a single-user login password. So it could be better in terms of security."
"The features are limited when it comes to scanning network devices for vulnerabilities."
"One area that has room for improvement is the reporting. I'm preparing reports for Windows and Linux machines, etc. Currently, I'm collecting three or four reports and turning them into one report. I don't know if it is possible to combine all of them in one report, but that would be helpful."
"The user interface of Tenable Nessus feels outdated and could be more user-friendly."
"In terms of what could be improved, I would say its reporting portion."
"Some things in the user interface could be better. The user interface could allow more adjustments to plugins. The price could also be better."
"EQA's and dashboards should be addressed in the next release."
"The reports should be improved in Tenable Nessus. For example, when you are auditing compliance with CIS standards. It provides very poor reports."
 

Pricing and Cost Advice

"Pricing-wise, it is not expensive as compared to other tools. If you have a couple of licenses, you can scan a certain number of projects. It just needs to be attached to them."
"Despite Snyk's coverage, scalability, reliability, and stability, it is available at a very competitive price."
"The product has good pricing."
"It's inexpensive and easy to license. It comes in standard package sizing, which is straightforward. This information is publicly found on their website."
"Cost-wise, it's similar to Veracode, but I don't know the exact cost."
"We are using the open-source version for the scans."
"For what Snyk offers, it has the best cost-benefit I have ever seen because you're buying the license per user."
"The solution is less expensive than Black Duck."
"This solution is affordable."
"The cost is around $4,300 per year. Use is unlimited. You don't pay more if you want to use it for another IP."
"The price of Tenable Nessus is much more competitive versus other solutions on the market."
"I rate the product's price seven or eight on a scale of one to ten, where one is low price and ten is high price."
"The price is okay. I would give it a seven out of ten, where one is cheap and ten is expensive."
"We incurred a single cost for a perpetual license, although I cannot comment on the price as this is above my management level."
"The product pricing is dynamic and varies based on the specific needs of each project and customer."
"Its price is high for Libya. The companies here in Libya don't have the awareness of and a good budget for cybersecurity services. If you want them to go for a product, you need to provide something different. This differentiation is related to the price. They should give about 40% to 45% discount per person on the current cost."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
824,067 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
15%
Manufacturing Company
9%
Insurance Company
7%
Educational Organization
40%
Computer Software Company
9%
Government
6%
Financial Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Snyk compare with SonarQube?
Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...
What do you like most about Snyk?
The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities.
What needs improvement with Snyk?
Snyk has several limitations, including issues with Gradle, NPM, and Xcode, and trouble with AutoPR. It lacks the ability to select branches on its Web UI, forcing users to rely on CLI or CI/CD for...
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. You can easily prioritize vulnerabilities using attacker analytics. Overall, Rapid...
What's the difference between Tenable Nessus and Tenable.io Vulnerability Management?
Tenable Nessus is a vulnerability assessment solution that is both easy to deploy and easy to manage. The design of the program is such that if a company should desire to handle the installation t...
What do you like most about Tenable Nessus?
We have around 500 virtual machines. Therefore, we conduct monthly scans and open tickets for our developers to address identified vulnerabilities. These scans cover the servers, other network equi...
 

Comparisons

 

Learn More

 

Overview

 

Sample Customers

StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief
Bitbrains, Tesla, Just Eat, Crosskey Banking Solutions, Covenant Health, Youngstown State University
Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Tools. Updated: December 2024.
824,067 professionals have used our research since 2012.