Try our new research platform with insights from 80,000+ expert users

Tenable One Exposure Management Platform vs XM Cyber comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 4, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Ranking in Continuous Threat Exposure Management (CTEM)
4th
Average Rating
9.6
Reviews Sentiment
8.1
Number of Reviews
2
Ranking in other categories
Vulnerability Management (32nd)
Tenable One Exposure Manage...
Ranking in Continuous Threat Exposure Management (CTEM)
3rd
Average Rating
9.0
Reviews Sentiment
7.3
Number of Reviews
4
Ranking in other categories
Threat Intelligence Platforms (13th)
XM Cyber
Ranking in Continuous Threat Exposure Management (CTEM)
2nd
Average Rating
8.0
Reviews Sentiment
7.7
Number of Reviews
2
Ranking in other categories
Continuous Controls Monitoring (7th), Vulnerability Management (34th), Cloud Security Posture Management (CSPM) (26th)
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
Yusuf_Hashmi - PeerSpot reviewer
Good discovery and vulnerability features and is easy to use
I think it's a good product for risk-based or exposure-based vulnerability management. It gives me the ability to identify potential weaknesses in my environment quickly. Once those vulnerabilities get identified on the console, it is only a matter of performing those actions. I would rate it nine out of ten.
HolgerHeimann - PeerSpot reviewer
Reliable with no false-positives and helpful support
There's a lot of improvement possible, however, most of it is in the details. I personally like the concept, as it's pretty straightforward and the product is not trying to overload functionality. It's a clean and straightforward approach. You know what you get. Most of the improvements are detail improvements. They're pretty open to future requests as well, so we send them a lot of suggestions. For example, at the moment, they have something called Battleground. That's a visualization of the network, and it's a visualization of the attack paths that are possible. The program uses so-called scenarios, and we say, "Okay, I'm watching traffic for maybe 24 hours," and then you get a result for that scenario, what happens in that time with what the attack paths are, et cetera. The result of the same scenario yesterday or tomorrow may be different as something might change. In that, one of the things I'm currently missing, which is on the list to be added, is some kind of diff visualization. For example, showing a two-screen split of activity. On the left side of the screen, that's how it was yesterday; on the right side, that's how it is today; and here are the differences. We'd like to see a cheaper price.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Zafran is an excellent tool."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"The feature of vulnerability management and discovery is what I use."
"I think it's a good product for risk-based or exposure-based vulnerability management."
"For me, the setup has been an easy process."
"The product gives us a lot of insight."
"The solution is very easy to set up."
"What I personally like very much, from my experience, is that it is very reliable."
"The platform's most valuable feature is attack simulation."
 

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"It would be nice if the product provided an agent for enforcing policies."
"The product has limited reporting capabilities and it isn't great at allowing for customization in reports."
"Tenable needs to provide a better way to manage private clouds."
"The sensor update is a challenge that Tenable needs to address. Sometimes they behave abruptly, requiring me to rework reinstalling the sensors on the endpoints."
"The sensor update is a challenge that Tenable needs to address."
"We'd like to see a cheaper price."
"XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas."
 

Pricing and Cost Advice

Information not available
"The pricing is fair."
"We have to pay standard licensing fees."
report
Use our free recommendation engine to learn which Continuous Threat Exposure Management (CTEM) solutions are best for your needs.
842,388 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
12%
University
7%
Retailer
6%
Computer Software Company
17%
Financial Services Firm
9%
Manufacturing Company
8%
Retailer
6%
Computer Software Company
15%
Financial Services Firm
15%
Manufacturing Company
9%
University
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Pricing for Zafran Security is not expensive. We have a contract for five years, and the cost is lower than other too...
What needs improvement with Zafran Security?
I would like to see an integration with Check Point firewalls. It's essential for us and they are currently working o...
What is your primary use case for Zafran Security?
We use Zafran Security for threat prioritization. We establish priority to understand which risks should be patched o...
What do you like most about Tenable.ep?
The product gives us a lot of insight.
What needs improvement with Tenable.ep?
There is not much room for improvement. However, the sensor update is a challenge that Tenable needs to address. Some...
What do you like most about XM Cyber?
The platform's most valuable feature is attack simulation.
What is your experience regarding pricing and costs for XM Cyber?
We have to pay standard licensing fees. There are no additional costs. It is an expensive product. I rate the pricing...
What needs improvement with XM Cyber?
XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas.
 

Also Known As

No data available
Tenable.ep
No data available
 

Overview

 

Sample Customers

Information Not Available
Information Not Available
Hamburg Port Authority, Plymouth Rock Corporation
Find out what your peers are saying about Tenable One Exposure Management Platform vs. XM Cyber and other solutions. Updated: March 2025.
842,388 professionals have used our research since 2012.