Tenable Nessus

It detects a broad spectrum of known CVEs, misconfigurations, and compliance issues. The false positive rate is low, saving time on unnecessary review. Plugins are regularly updated with new vulnerabilities and checks. It supports various scan types: credentialed, uncredentialed, web app, compliance, and custom policies. Reports often include step-by-step fixes and CVSS scores. Basic scans are quick to set up and execute. It's well-established and trusted in cybersecurity. Integration is available via APIs, exports, and plugins, but costs can escalate for advanced features and larger setups. UI and reporting could be improved, with limited customization for reports and dashboards. Advanced scans require deeper technical knowledge. Authenticated and web app scanning can be tricky and may need adjustments for complex login flows. It's not ideal for full lifecycle VM without integration with Tenable.io or Tenable.sc. Performance can suffer on large networks if resources aren't sufficient. Nessus addresses unpatched vulnerabilities, misconfigurations, compliance gaps, visibility issues, and manual workflows. Benefits include reduced attack exposure, faster and more confident patching, audit-ready reports, improved security-IT collaboration, better resource allocation, time savings, and peace of mind from continuous monitoring.

Tenable Nessus is a widely-used tool that shines due to its usability, enabling quick learning without extensive training or a steep curve. Its intuitive design supports rapid adoption across our team. I also like the ability to define IP ranges and run both ad-hoc and scheduled scans. This is vital for maintaining network integrity and security, helping us manage and reduce vulnerabilities efficiently. One downside is that pricing has risen notably recently. We use it to scan for vulnerabilities, enhancing our cybersecurity through patching and system status reporting.

Integration, compatibility, performance without network slowdown, and pricing. There's also a great feature for tracking exception vulnerabilities. It aids in identifying risks, mitigating them, and leveraging AI.

Starting a basic IP scan is very user-friendly. As someone without a developer background, I quickly learned the interface and ran scans with ease. The reports are suitable for audits, and we've used them for compliance submissions. However, since reports are in PDF, we can't assign specific vulnerabilities to teams. Exporting to Excel would allow better allocation of tasks. Through DAST scanning, we spot vulnerabilities right after deployment and continuously, which greatly enhances the organization's security posture. We use the NIST framework to track our security, and this tool fits well to boost our scores.

Nessus allows us to scan the perimeter for vulnerabilities. Each module is licensed separately. We identify perimeter vulnerabilities that could impact operational continuity.

We rely on Tenable Nessus for our business vulnerability scanning, valuing its capacity to scan VLANs, report CVEs, and offer remediation steps. It helps us maintain CIS18 compliance and catch hidden network issues. Its interface is more user-friendly than other scanners we've tried, and we like that it doesn't require building our own reports. Additional UI customization would be welcome, including options to download extra report types or create custom views. We use it to scan VLANs, report CVEs, and get remediation advice, ensuring we stay aligned with CIS18 and uncover invisible problems.

We're able to swiftly scan our network and identify vulnerabilities based on frameworks like NIST and NVD CVSS. Detailed reports sorted by severity are readily available. The included remediation guidance helps us resolve issues quickly. We've encountered no drawbacks with this product. Pricing might be a hurdle for smaller organizations, and Tenable could consider offering lightweight versions or shorter subscriptions at a lower cost. It assists us in meeting specific cybersecurity standards and, of course, in maintaining a secure network.

Tenable Nessus stands out as the simplest vulnerability management tool we've deployed and configured. Its plugins receive frequent updates and cover nearly every service type. The scanner has a low false-positive rate, which we really appreciate. However, costs have been climbing each year, and we anticipate that SC and cloud versions might become obsolete soon. We'd welcome more competitive pricing for a smooth upgrade path. Technically, there's nothing we dislike about the product; it accurately addresses our needs and allows us to route issues to the right people.

Nessus proves highly valuable in certain parts of our infrastructure because it's fully self-contained and works on networks with limited or no external connectivity. Having complete command over every operational detail is a major plus. We also appreciate the ability to adjust the underlying host size and network layout to meet scanning demands. The main drawback is that it can occasionally produce false positives due to insufficient collaboration with software vendors for a unified backport approach. Relying solely on version numbers to identify vulnerabilities is outdated; a feature that recognizes CVE coverage without version changes would be excellent. Nessus scans networks and devices that are unreachable even with our deployed on-site TVM scanners.

The standout aspect of Tenable Nessus for me is its straightforwardness and dependability. It simplifies vulnerability scanning and delivers clear, practical results without burying me in unnecessary details. It's particularly useful for spotting risks fast, ranking them, and offering actionable fix steps. In short, it cuts down on time and boosts the efficiency of security reviews. A downside I've noticed is that scan outputs can occasionally be cluttered with false positives that require manual checking. On larger networks, scans may be time-consuming and resource-heavy, causing slowdowns. Additionally, I think the reporting options could be more adaptable and tailored straight out of the box. Even though it's a robust tool, it still requires some adjustments and validation to maximize its value. Nessus tackles the issue of spotting vulnerabilities across systems before they get exploited. Rather than manually inspecting setups or overlooking critical problems, it offers a unified view of security holes, outdated software, and misconfigurations. This helps me save time, enhances visibility across the infrastructure, and lets me prioritize fixes based on risk, making security assessments and compliance work far more efficient.