Tenable Cloud Security vs Zscaler Zero Trust Exchange Platform comparison

Tenable and Zscaler are both solutions in the Cloud Security Posture Management (CSPM) category. Tenable is ranked #17 with an average rating of 8.4, while Zscaler is ranked #10 with an average rating of 8.4. Additionally, 71% of Tenable users are willing to recommend the solution, compared to 98% of Zscaler users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 7, 2024

Zscaler Zero Trust Exchange Platform and Tenable Cloud Security are competitors in the cloud-based security market. Zscaler seems to have the upper hand due to its integration capabilities and performance, while users also value its pricing and ease of deployment.

Features: Zscaler is known for its scalability, extensive security features, and cloud performance. It focuses on seamless integration, which is attractive to users looking for comprehensive cloud infrastructure protection. Tenable provides thorough vulnerability scanning, risk assessment, and is noted for its comprehensive vulnerability assessment tools, crucial for robust security.

Room for Improvement: Zscaler could enhance its reporting for more detailed insights and refine certain features for better user experience. Tenable might improve real-time alerts and simplify its management dashboard. Addressing usability aspects is important for Tenable to boost user satisfaction.

Ease of Deployment and Customer Service: Zscaler is commended for straightforward deployment and responsive customer service, making it a preferred choice for quick rollouts. Tenable, though effective, may have a more complex setup, which could delay implementation. Users find Zscaler's support efficient in resolving technical issues.

Pricing and ROI: Zscaler is seen as cost-effective, with a strong correlation between price and value. Users with budget limits are attracted to Zscaler's offerings. Tenable, despite higher setup costs, offers strong ROI due to its in-depth security insights, justifying the investment through comprehensive enhancements.

To learn more, read our detailed Cloud Security Posture Management (CSPM) Report (Updated: September 2024).

Buyer's Guide

Cloud Security Posture Management (CSPM)

September 2024

Download the complete report

Helped 812,651 peers since 2012

Categories and Ranking

SentinelOne Singularity Clo...

Featured Reviews

Andrew W

VP - Information Technology at a financial services firm with 201-500 employees

Aug 29, 2024

Tells us about vulnerabilities as well as their impact and helps to focus on real issues

Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.

Read full review

Rob Hussey

System Administrator at OnShift

Oct 19, 2023

Helps to react promptly with monitoring and alerting capabilities

We use Ermetic for monitoring and alerting. The tool alerts us on depreciating performance or deficiencies of our web application. It helps us react on time. Ermetic needs to improve its security scanning. I would like to see more dynamic graphical forms. I have been working with the solution…

Read full review

Vikram Srirama.

Deputy General Manager at Sagility

Oct 4, 2023

A VPN alternative that delivers a zero trust model

The primary use cases for the Zscaler include secure channel access for applications, private file service access, and remote connectivity to the active directory. These are the top three essential functionalities provided by Zscaler Previously, we utilized HubSpot, which required connecting to…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cloud Native Security has helped us with our risk posture and securing our agenda. It has been tremendous in terms of supporting growth."

"SentinelOne stands out with its responsiveness to feature requests for Singularity Cloud Security."

"The real-time detection and response capabilities overall are great."

"They're responsive to feature requests. If I suggest a feature for Prisma, I will need to wait until the next release on their roadmap. Cloud Native Security will add it right away."

"Cloud Native Security's most valuable features include cloud misconfiguration detection and remediation, compliance monitoring, a robust authentication security engine, and cloud threat detection and response capabilities."

"PingSafe's graph explorer is a valuable tool that lets us visualize all connected services."

"PingSafe has a dashboard that can detect the criticality of a particular problem, whether it falls under critical, medium, or low vulnerability."

"We like PingSafe's vulnerability assessment and management features, and its vulnerability databases."

More SentinelOne Singularity Cloud Security pros

"The tool alerts us on depreciating performance or deficiencies of our web application. It helps us react on time."

"Scanning and reporting are the most valuable features of Tenable Cloud Security"

"The key benefit lies in having the largest and most up-to-date database. When it comes to using any Tenable product, it excels in finding vulnerabilities and providing analytics."

"The product's deployment phase is easy."

"Tenable Cloud Security excels in vulnerability detection, one of its strongest features. Another valuable feature is software composition analysis, which highlights and automates the detection of security flaws. Additionally, their knowledge base is excellent; if anything goes wrong, they provide clear guidance on what needs to be done to address specific vulnerabilities."

"Ermetic can provide super visibility for our cloud environment (we are using AWS)."

"The product's visibility and remediation work fine for me."

"The solution’s vulnerability management feature has helped us identify and mitigate risks well."

More Tenable Cloud Security pros

"The product’s most valuable features are data discovery, activity control, and zero trust exchange."

"The most valuable features of Zscaler SASE include web filtering, application control, and the private access configuration."

"On DLP terms, Zscaler Cloud DLP ensures that data doesn't go outside of the organization. So on the network level, Zscaler does a pretty good job."

"The agent's versatility is notable, used for digital experience monitoring to collect valuable endpoint metrics for troubleshooting."

"The user interface of Zscaler Private Access is excellent. With proper knowledge and expertise, one can efficiently handle intricate enterprise environments without feeling overwhelmed. This leads to exceptional productivity for managed service providers. The user experience is remarkably streamlined, enabling the management of even the most complex enterprise setups without any excessive complications."

"It is easy to use."

"It has some good data security and WIP features, providing secure Internet access."

"The in-line DLP feature is one of the most vital features"

More Zscaler Zero Trust Exchange Platform pros

Cons

"Some of the navigation and some aspects of the portal may be a little bit confusing."

"Maybe container runtime security could be improved."

"We use PingSafe and also SentinelOne. If PingSafe integrated some of the endpoint security features of SentinelOne, it would be the perfect one-stop solution for everything. We wouldn't need to switch between the products. At my organization, I am responsible for endpoint security and vulnerability management. Integrating both functions into one application would be ideal because I could see all the alerts, heat maps, and reports in one console."

"There's an array of upcoming versions with numerous features to be incorporated into the roadmap. Customers particularly appreciate the service's emphasis on intensive security, especially the secret scanning aspect. During the proof of concept (POC) phase, the system is required to gather logs from the customer's environment. This process entails obtaining specific permissions, especially in terms of gateway access. While most permissions for POC are manageable, the need for various permissions may need improvement, especially in the context of security."

"It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background."

"I would like PingSafe's detections to be openly available online instead of only accessible through their portal. Other tools have detections that are openly available without going through the tool."

"They need more experienced support personnel."

"We are experiencing problems with Cloud Native Security reporting."

More SentinelOne Singularity Cloud Security cons

"I do think there might be room for more integrations. This could allow for further customization and flexibility, essentially offering different functionality options to accommodate various budgets."

"Due to its robust nature, the platform's adoption can be overwhelming initially. However, once organizations start using it, they tend to get used to it. I haven't had much direct interaction with the support team, but some partners have reported a desire for better support for the product."

"Tenable needs to offer a patch-based solution since it is an area where the tool lacks a bit."

"The product must provide more features."

"There is a need for the support team to improve their response time since it is one of the areas where the product's technical team has certain shortcomings."

"If Tenable Cloud Security offers a complete Cnapp solution with CWP, CIEM, and Waap security, it will be able to compete with other competitors."

"I didn't find anything that wasn't useful or needed to be added."

"Ermetic needs to improve its security scanning. I would like to see more dynamic graphical forms."

More Tenable Cloud Security cons

"The pre-defined dictionaries could be improved."

"We would like to extend the SASE applications for Zscaler."

"It has a limitation, if you are creating a rule or something for a web application or something, you could only add five users, not more than that. Five or four users are only included in a rule. If you want to create a rule for more than five or four users, you have to go through other methods, not particularly with the application. Working within the application with this method would be quite easy as compared to listing a URL or a normal IP address."

"Conflicts arise if you do not have the same management teams on the product."

"The connectivity monitoring part should be included in the core license without any extra charges."

"There is improvement in enhancing proper manageability, policies, and logs. So, log management could be improved."

"More on-prem infrastructure is required when Zscaler Private Access is to be implemented as a single point of entry."

"There are latency issues with the solution. They are small, however, they are there when you compare it to other vendors."

More Zscaler Zero Trust Exchange Platform cons

Pricing and Cost Advice

"PingSafe is affordable."

"The price depends on the extension of the solution that you want to buy. If you want to buy just EDR, the price is less. XDR is a little bit more expensive. There are going to be different add-ons for Singularity."

"Singularity Cloud Workload Security's pricing is good."

"It was reasonable pricing for me."

"We have an enterprise license. It is affordable. I'm not sure, but I think we pay 150,000 rupees per month."

"It is cheap."

"PingSafe is priced reasonably for our workload."

"Pricing is based on modules, which was ideal for us."

More SentinelOne Singularity Cloud Security pricing and cost advice

"The tool's price is good compared to other brands. The tool's subscription is for a year."

"The tool's pricing is fair."

"There is a need to opt for a subscription-based pricing model to use Tenable Cloud Security. I rate the product price an eight on a scale of one to ten, where one is low price and ten is high price."

"It's an affordable solution"

"It's expensive currently. But when purchasing for a large number of users, there's room to negotiate. It's really up to the procurement team."

"The pricing is expensive and on the higher end. Honestly, in my opinion, it is not worth the price."

"Zscaler CASB is an expensive solution."

"The product is a little more expensive than other tools."

"In terms of market positioning, I would describe Zscaler Private Access as offering optimal pricing. Based on our experience, Cato Networks tends to be slightly more expensive."

"The solution has increased prices this year."

"The technical support is good."

More Zscaler Zero Trust Exchange Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

812,651 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

19%

Financial Services Firm

16%

Manufacturing Company

10%

Insurance Company

Computer Software Company

16%

Financial Services Firm

14%

Government

Manufacturing Company

Computer Software Company

17%

Financial Services Firm

13%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

See all answers

What is your experience regarding pricing and costs for PingSafe?

I am personally not taking care of the pricing part, but when we moved from CrowdStrike to Singularity Cloud Native S...

See all answers

What needs improvement with PingSafe?

They can provide some kind of alert when a new type of risk is there. There can be a specific type of alert showing t...

See all answers

What do you like most about Tenable Cloud Security?

The solution’s vulnerability management feature has helped us identify and mitigate risks well.

See all answers

What needs improvement with Tenable Cloud Security?

Another team uses the tool. Tenable acquired Ermetic. I think Tenable has features, stays up to date, and upgrades ev...

See all answers

What is your primary use case for Tenable Cloud Security?

Right now, I use Tenable as CNAPP, and it is good for the product as it offers enhanced security to users. We did use...

See all answers

What is the better solution - Prisma Access or Zscaler Private Access?

We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...

See all answers

What do you like most about Zscaler SASE?

The most valuable features of Zscaler Private Access are reliability, scalability, and availability.

See all answers

What is your experience regarding pricing and costs for Zscaler SASE?

Zscaler SASE is quite expensive compared to other solutions. The price is not fixed and it does not include all of th...

See all answers

Comparisons

Wiz vs SentinelOne Singularity Cloud Security

Compared 33% of the time

Prisma Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Compared 24% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 8% of the time

Orca Security vs SentinelOne Singularity Cloud Security

Compared 7% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 4% of the time

More SentinelOne Singularity Cloud Security Competitors

Wiz vs Tenable Cloud Security

Compared 23% of the time

Orca Security vs Tenable Cloud Security

Compared 12% of the time

Prisma Cloud by Palo Alto Networks vs Tenable Cloud Security

Compared 10% of the time

CrowdStrike Falcon Cloud Security vs Tenable Cloud Security

Compared 10% of the time

Sonrai Security vs Tenable Cloud Security

Compared 2% of the time

More Tenable Cloud Security Competitors

Prisma Access by Palo Alto Networks vs Zscaler Zero Trust Exchange Platform

Compared 10% of the time

Microsoft Purview Data Loss Prevention vs Zscaler Zero Trust Exchange Platform

Compared 9% of the time

Cato SASE Cloud Platform vs Zscaler Zero Trust Exchange Platform

Compared 8% of the time

Axis Security vs Zscaler Zero Trust Exchange Platform

Compared 6% of the time

Wiz vs Zscaler Zero Trust Exchange Platform

Compared 5% of the time

More Zscaler Zero Trust Exchange Platform Competitors

Product Reports

Buyer's Guide

SentinelOne Singularity Cloud Security

September 2024

SentinelOne Singularity Cloud Security report

Download SentinelOne Singularity Cloud Security product report

Buyer's Guide

Tenable Cloud Security

September 2024

Download Tenable Cloud Security product report

Buyer's Guide

Zscaler Zero Trust Exchange Platform

September 2024

Zscaler Zero Trust Exchange Platform report

Download Zscaler Zero Trust Exchange Platform product report

Also Known As

PingSafe

Ermetic, Ermetic Identity Governance for AWS

Zscaler SASE, Zscaler DLP, Zscaler CASB, Zscaler CSPM, Zscaler Browser Isolation, Zscaler Posture Control

Learn More

SentinelOne

Tenable

Zscaler

Overview

SentinelOne Singularity Cloud Security protects cloud workloads, offering advanced threat detection and automated response. It integrates seamlessly with cloud environments and secures containerized applications and virtual machines against vulnerabilities.

SentinelOne Singularity Cloud Security is renowned for its efficiency in mitigating threats in real-time. The platform integrates effortlessly with existing cloud environments, ensuring robust cloud security management with minimal manual intervention. Securing containerized applications and virtual machines, it excels in threat intelligence and endpoint protection. However, improvements are needed in performance during high workload periods, and more integrations with third-party tools and better documentation would be beneficial. Users often find the installation process complex, support response times slow, and the dashboard's navigation unintuitive.

What are the key features of SentinelOne Singularity Cloud Security?

Real-time Threat Detection: Identifies and mitigates threats as they occur.
Automated Response: Automatically responds to threats to minimize impact.
Ease of Deployment: Simple setup process with scalable options.
Machine Learning Insights: AI-driven insights enhance threat prevention.
Seamless Integration: Integrates with cloud environments for unified security management.

What are the primary benefits or ROI to expect from SentinelOne Singularity Cloud Security?

Enhanced Threat Mitigation: Improved security against real-time threats.
Reduced Manual Intervention: Automated processes save time and resources.
Scalability: Easily adapts to growing security requirements.
Centralized Management: Manage security across platforms from a single console.
Advanced Threat Intelligence: Provides in-depth analysis and protection.

In specific industries, SentinelOne Singularity Cloud Security is implemented to safeguard critical data and infrastructure. Organizations in finance, healthcare, and technology depend on its real-time threat detection and automated response to protect sensitive information. Its ability to secure containerized applications and virtual machines is particularly valuable in dynamic environments where rapid scaling is necessary.

Tenable Cloud Security is a comprehensive solution designed to help organizations secure their cloud environments across various platforms, including AWS, Azure, and Google Cloud. It offers continuous visibility, compliance management, and threat detection to ensure that cloud infrastructure and applications are protected from vulnerabilities and misconfigurations.

Tenable Cloud Security exemplifies a comprehensive Cloud-Native Application Protection Platform (CNAPP) by providing a unified solution that covers the entire cloud security lifecycle, from development to runtime. This platform is designed to address vulnerabilities, misconfigurations, threats, and compliance risks across multi-cloud environments, making it an essential tool for organizations adopting cloud-native architectures. In practice, Tenable Cloud Security integrates security into the development process through its shift-left approach, particularly with Infrastructure as Code (IaC) security. This ensures that security measures are embedded early in the development lifecycle, allowing teams to identify and mitigate vulnerabilities before they reach production. Once in production, the platform continues to provide real-time visibility into cloud environments, enabling continuous monitoring and proactive threat detection.

The solution's comprehensive protection spans various aspects of cloud security, including the identification and remediation of misconfigurations, automated compliance management, and advanced threat intelligence. By automating these processes, Tenable Cloud Security reduces the manual effort required to manage cloud security, freeing up resources for more strategic initiatives.

What are the key features of Tenable Cloud Security?

Unified Platform: Covers the entire cloud security lifecycle, from development to runtime, providing comprehensive protection.
Shift-Left Approach with IaC Security: Integrates security early in the development process, ensuring that vulnerabilities are caught and remediated before deployment.
Continuous Monitoring: Offers real-time visibility and monitoring of cloud environments, enabling proactive threat detection and response.
Automation: Streamlines security operations, reducing the need for manual intervention and increasing operational efficiency.
Comprehensive Threat and Compliance Management: Identifies and mitigates vulnerabilities, misconfigurations, and compliance risks across multi-cloud environments.

What are the benefits of using Tenable Cloud Security?

Improved Security Posture: Early detection and remediation of vulnerabilities lead to a stronger overall security posture.
Operational Efficiency: Automation reduces the workload on security teams, allowing them to focus on higher-priority tasks.
Risk Reduction: Proactively identifies and addresses risks before they impact production environments.
Simplified Compliance: Helps organizations meet and maintain compliance with industry standards, reducing the complexity and cost of audits.

Tenable Cloud Security is particularly valuable in industries with stringent regulatory requirements, such as finance, healthcare, and retail. For example, in the financial sector, it helps organizations ensure compliance with regulations like PCI-DSS while safeguarding sensitive data across cloud environments.

In summary, Tenable Cloud Security is a robust CNAPP solution that integrates security throughout the cloud lifecycle, providing comprehensive protection and operational efficiency for cloud-native environments.

Zscaler Zero Trust Exchange Platform acts as a VPN alternative for secure remote access, cloud protection, and zero-trust strategies. It enables secure data transmission, supports remote work, and enhances compliance through a cloud-based architecture, offering improved performance and simplified management.

Designed for organizations seeking secure application access and robust data protection, Zscaler Zero Trust Exchange Platform delivers a comprehensive solution through seamless VPN connectivity, data loss prevention, and SSL inspection. Its cloud integration ensures scalability and reliability, while its interface provides intuitive management. Companies benefit from automatic secure access, minimizing constant authentication needs, and safeguarding sensitive data. The platform allows easy deployment and integration with diverse identity providers, granting granular control for access and application segmentation. Despite powerful capabilities, enhancements are needed in speed, bandwidth, and legacy support, with users noting interface and configuration challenges.

What are the key features of Zscaler Zero Trust Exchange Platform?

Seamless VPN Connectivity: Provides automatic secure access without repetitive authentication.
Strong Security Measures: Offers DLP and SSL inspection for data protection.
Cloud Integration: Ensures scalability and performance optimization.
Granular Access Control: Manages access with application-specific segmentation.

What benefits should companies look for in reviews when evaluating this platform?

Performance: Enhanced connectivity and reduced latency.
Data Protection: Comprehensive DLP and encryption capabilities.
Scalability: Efficient handling of growing organizational demands.
Ease of Deployment: Quick setup and integration with IDPs.

In specific industries, Zscaler Zero Trust Exchange has been implemented to enhance security protocols in fields like finance and healthcare. By prioritizing data protection and compliance, it assists companies in safely managing sensitive information and meeting regulatory requirements. Organizations leverage its features to ensure secure operations across remote and cloud environments, adapting to industry-specific needs with customizable access and security controls.

Sample Customers

Information Not Available

Tyler Technologies, Bilfinger, BarkBox, MongoDB, airSlate, Adama, Latch, Cloudinary, Riskified, AppsFlyer, IntelyCare, Aidoc, 42Dot, and more.

Siemens, AutoNation, GE, NOV

Buyer's Guide

Cloud Security Posture Management (CSPM)

September 2024

Download Free Report

Find out what your peers are saying about Palo Alto Networks, Wiz, Microsoft and others in Cloud Security Posture Management (CSPM). Updated: September 2024.

DOWNLOAD NOW

812,651 professionals have used our research since 2012.

See our list of best Cloud Security Posture Management (CSPM) vendors and best Cloud-Native Application Protection Platforms (CNAPP) vendors.

We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.