Tenable Vulnerability Management Reviews

We use Tenable.io for vulnerability scanning.

I like the Cloud Scanning feature the most.

They can improve in the area of role management and compliance reporting.

They should include better customization of the dashboard and integration tools.

We have been partners with Tenable.io for four years.

It is pretty stable. I would rate it nine or maybe ten out of ten. I didn't realize that the solution will be dropped in availability.

It is a scalable solution. I would like to rate it a six out of ten.

Many times, I get some answers that are not suitable information for my query. Thus, I need to escalate our vendors and our contacts internally. When some task is escalated and some security engineer supports them, it becomes quite helpful. After all, we are a part of it. I am working with Tenable.io. So in general when I have some problems, it is a pretty big problem for me. And I need someone else for support. It is not a general problem that some customers can figure out.

Neutral

Two years ago, I was training for Rapid7. Since then, I have had no time to implement another solution. So we are just implementing Tenable.io right now. Also, we have some big Tenable.io projects. So, we are just working around Tenable.io. But I have some expectations to work in the future with another vendor for vulnerability management.

I don't have any comparative options from another vendor. I just work at the retail level. I know it has a pretty high cost for some features. It's a security vendor, and the security solutions are pretty high-priced. I think Tenable.io is available at the mid-range of prices, maybe the mid-high range.

I work with Tenable.io and implement this solution for many customers. I would rate it eight out of ten.

The solution needs either two engineers or one security specialist to maintain it.

We use the Tenable Vulnerability Management solution for internal web applications, asset management, and remediation. It helps us transfer and leverage the remediation of websites, effectively addressing vulnerabilities.

We need to deploy this on internal assets. It resides within the internal infrastructure and communication.

It encompasses everything at some point. From development to deployment, it receives the necessary attention. 

The solution provides seamlessness, a perfect UI, and identity management for office operations. We are most vulnerable to users. Therefore, it is crucial to implement the right solution to ensure proper user access and resource management.

I have been using Tenable Vulnerability Management for 4 years.

200 users are using this solution.

We have used Qualys. It is tricky and expensive.

The initial setup is seamless and takes three days to complete. Two people are required for the deployment but one person can do as well.

This process is seamless because checks are scheduled at different intervals, typically every ten minutes. Once a log is generated, we attend to it immediately. Also, the maintenance is straightforward.

Overall, I rate the solution an eight out of ten.

I am a consultant and I advise my clients from a security standpoint. My goal is to get them to maximize value from Tenable.io. I am also a user of it. 

The most valuable feature for me is container scanning because I am interested in CICD security. The standard infrastructure scanning is pretty robust, which is why I was focusing on containers.

We had some challenges with the implementation because of Docker Version 2, although with help from the support team, we were able to proceed.

It would be helpful if Tenable could be more clear with regard to everything the solution can and cannot do with the particular license that you have. The information is not available on the web site and they should be more upfront about it.

I have been using Tenable.io for between six and eight months. My company had acquired it before I joined, although it was not being utilized properly.

I have never encountered any issues relating to stability. I have never seen a scan crash, and we've been able to configure multiple scans to run concurrently. Everything appears to run smoothly.

Other than running multiple scans concurrently, we have not looked at scalability. However, I have no doubt that we will be able to get support in order to meet our expectations.

The support team is very good and we are quite happy with them. When we had the trouble with Docker Version 2, they responded and were able to help us troubleshoot, and then guide us to the resolution. It now works the way we wanted it to.

I have worked with the open-source solution OpenVAS, as well as with Rapid7 and Qualys. I can see that Tenable.io is going to be one of the big players because they are doing very well in this space.

I think that the price is reasonable for now, although given that everybody is looking to cut costs, I think that they should take measures to lower it. There are additional features that can be licensed for an additional cost.

My advice for anybody who is implementing this product is to have all of the requirements documented and ready in advance. You match the solution to your requirements. Out of the box, we found that Tenable.io matched almost all of our requirements. The only clarification that we needed had to do with the Tenable.io Web App license. 

We have a good understanding of how Tenable.io works with containers and infrastructure, but when it comes to deep driving into applications, databases, APIs, and toolkits that you have in your environment, you need a separate license for that. This is what the Web Application license is.

In order to enjoy the maximum value, you need to have the appropriate licensing.

Overall, I am quite happy with Tenable.io.

I would rate this solution a nine out of ten.

Our primary use case for the solution is managing organizations with assets. Our on-premises assets are in the private or public cloud so the customer doesn't need to have the server installed and deployed but can touch and go once the license has a provision. The user can use it right away. 

By making different resources available for sharing among users and groups, Tenable.io provides endless possibilities for creating customized workflows for vulnerability management programs, regardless of any of the numerous regulatory or compliance drivers that demand keeping your business secure.

With Tenable.io, we can schedule scans, push policies, view scan findings, and control multiple Nessus scanners from the cloud. This enables the deployment of Nessus scanners throughout networks to both public and private clouds as well as multiple physical locations

There is no burden to update or upgrade the solution manually, so it's always up to date. 

The price could be lower, and the grouping of platforms on the dashboard can be included in the next release of the product.

We have been using the solution for approximately four years.

The solution is stable.

The solution is scalable because if you want to extend the license, you can do it over a call every quarter. Additionally, the scaling does not require infrastructure requirements or additional infrastructure because all are hosted in the Tenable.io Vulnerability Management cloud. 

The initial setup is straightforward. However, once the account is provisioned for a user, Its just the data collector to set up Scanner/Agents, and it takes approximately two hours to set everything up.

It costs approximately $2,300 yearly.

We chose this solution because it has a great reporting feature and provides the most CVE coverage and VPR. Additionally, the solution has been in the industry for a long time and performs well.

I rate the solution an eight out of ten. The solution is good, but the price could be lower, and the grouping of platforms on the dashboard can be included in the product's next release. I advise new users to know the infrastructure system and networking. Additionally, there are videos and documentation that will assist them in getting set up to use the product right away.

We primarily use the solution for on-premises monitoring. We use it to monitor the servers in our organization.

For most of the updates, Windows updates, et cetera, the service will let us know when we shouldn't apply an update due to the fact that there's some missing code, for example. It gives us great insights into security risks.

The vulnerability scanning has been great as it's helped us to define some issues around the updates of some things, and some items surrounding services we need to take care of.

The initial setup is very straightforward.

The solution has been very stable and quite scalable.

The dashboard and the main panel could be better. It's lacking right now. Sometimes it's hard to find what you need in the menus. There needs to be better dashboard navigation.

There needs to be more curation of core knowledge.

The documentation was hard to find. It's not all in one place. It's kind-of all over. You have to work to seek it out.

I can't recall any features that are lacking. I can't think of any additions we'd like to see in the next release.

I've been using the solution for six months at this point. This has occurred within the last year. It hasn't been that long.

The stability is very good. I haven't had any issues with it. There are no bugs or glitches. It doesn't crash or freeze.

The scalability of the solution is very good. If a company needs to expand it out, it can do so with relative ease.

We have a few network engineers that work with the solution directly.

I can't speak to any plans in terms of increasing usage. it's not something that we've discussed.

I've never directly dealt with technical support. I can't speak to how knowledgeable or responsive they are. 

I've read a lot of documentation and whitepapers on the product. However, they were not concentrated in one place. I had issues teaching down details about the product.

We did previously use a different solution, however, we've found Tenable to be much better.

The initial setup is quite straightforward. It's not complex. It was very easy to create an account

The deployment itself only took one day. It was quite fast.

We have four people on staff that are knowledgeable enough to handle deployment and maintenance.

We handled everything ourselves. it was all online and very simple. We didn't need the assistance of a consultant or reseller. 

I don't handle the licensing aspects of the solution. I'm not aware of the costs involved.

We potentially looked at Qualys and Rapid7 before ultimately choosing Tenable.

I cannot control the main difference.

We're a partner.

I'm not sure which version of the solution we're using.

I'd recommend the solution to other companies.

I'd rate the solution at an eight out of ten overall. We're mostly very happy with its capabilities.

It is useful for scanning the whole environment to check for any vulnerabilities. We can then start deploying or closing these vulnerabilities by applying the Windows or other product patches. In the end, we have an environment with no vulnerabilities, and we increase our security posture and security levels. 

It is very stable, and it is updated periodically by adding new vulnerabilities. It can discover much quickly as compared to other vendors.

Its management console and portal make it easy to use and effective. 

It can have more integration.

I have been using this solution for three months.

It is very stable.

It is scalable.

I haven't installed it on a customer's site. I just installed it in my lab in order to get familiar with the product, and that's it. It was just for testing.

It was a straightforward installation. Because it was done in my lab environment, it didn't take that much time. It took around three to four hours.

I did it myself.

I would recommend this solution at this time, but after installing it for more customers, my answer might change in the future.

I would rate this solution a seven out of 10.

Our primary use case for this solution is to perform in-depth vulnerability scans on the cloud.

The solution can integrate with third parties and meets standard compliance.

An area of improvement for this solution is being able to customize the dashboard. For example, the dashboard does not allow us to view a previous months vulnerability results alongside current results to make comparisons.

I have been using this solution for about two years.

The solution is very stable.

The customer service/technical support for the solution is very good.

The initial setup of the solution is not complicated and can easily be configured. Additionally, the solution comes with templates for assessing and auditing.

The solution is not too expensive.

The solution's most valuable aspects are its user interface and usability. In general, Tenable is one of the best products in terms of management tools.

The solution integrates well with other solutions.

I don't have any issues with the solution at this time, and I don't think there are any features that are missing or could be added.

The interface could be improved; right now it's running on two interfaces simultaneously.

I've been using the solution for half a year.

The solution is stable.

The scalability is good. Currently, we have thousands of computers using the solution.

Technical support has been good. They respond quite quickly.

The initial setup is straightforward, as it is a cloud version.

We use the cloud deployment model.

I'd recommend the solution. I'd rate it eight out of ten.