This is not an ad.

Does anyone have experience with Tenable products?

I’m interested in real world experience regarding:

  • cost
  • effectiveness
  • ease of use

I’m playing with Tenable Security Center and Nessus Scanner. I’m early in the deployment, just looking for pointers and whether anyone has used it?

What alternatives is your org using if not?

Can you compare?

Edit, if anyone is interested, I can post results and opinions here also.

  • catloaf@lemm.eeEnglish
    4·
    9 months ago

    I’ve used it at a couple places. It’s pretty good. It’s best at checking the box on an audit to say you have a vulnerability management program.

    If you want real coverage, you should also be actively involved in what’s in your company’s environment, and how security updates (for external software) and vulnerabilities (for internal) are handled. That is, do you have people looking for vulnerabilities, e.g. with fuzzing?

    For Windows environments, you should additionally look at bloodhound and pingcastle.