Tenable One [Private Offer Only]

I use this solution for vulnerability management for the infrastructure, one cloud security, CSPM, and application dynamic testing.

The feature of vulnerability management and discovery is what I use. While no specific improvements were mentioned, I have not experienced any difficulties or challenges.

There is not much room for improvement. However, the sensor update is a challenge that Tenable needs to address. Sometimes they behave abruptly, requiring me to rework reinstalling the sensors on the endpoints.

I have used the solution for the last two plus years.

The customer service team is pretty supportive. They have supported me multiple times, and I would rate them eight out of ten.

The initial setup is pretty easy, taking around four to six weeks. I have one main console. Deployment of the agent takes a bit more time and depends on the organization.

I believe there is a significant return on investment.

The setup cost is reasonable.

I think it's a good product for risk-based or exposure-based vulnerability management. It gives me the ability to identify potential weaknesses in my environment quickly. Once those vulnerabilities get identified on the console, it is only a matter of performing those actions.

I would rate it nine out of ten.

It's a product that combines Tenable.io vulnerability management, endpoint security, and cloud security, covering cloud application vulnerabilities, web application vulnerabilities, and identity management systems.

With Tenable.one, we can manage vulnerabilities and view our entire risk scoring. We can see information about our cloud infrastructure, web applications, endpoints, and even external logins from outside the corporate network.

We can easily identify the approach being used or the software running on those external devices. Organizations can also view live CVEs (Common Vulnerabilities and Exposures) with compliance information, which helps with risk and governance reporting. It covers other compliance data as well, like HIPAA and ISO standards. The scoring provides live data, whether it's from the cloud or application APIs.

It covers the entire IT environment. There's also tagging and grouping, so we can group and tag critical assets. We can also set up project alerts and send them via email.

The Tenable reporting part is very user-friendly. We can generate reports or customize them within the tool. I would rate it a nine out of ten.

Tenable has to improve its cloud solution. They're only supporting AWS and Azure.

Tenable partially supports Google Cloud but not fully. Tenable needs to give private cloud also.

So, Tenable needs to provide a better way to manage private clouds. They have to cover all cloud environments.

I've been using it for the last two years. I'm a partner and I also support customers.

It is a 100% stable product.

It's very scalable. We can monitor each and every person and asset. We have performance metrics, and we can focus on specific areas.

The customer service and support are good.

For me, the setup has been an easy process. It takes three days per segment. Per segment means I mainly get cloud security's individual part, Tenable.io's individual part and the web application scanning (WAS) is also an individual part.

One guy is enough if he has an awareness of the cloud, the application, and its infrastructure. For Tenable, we need support from three domains.

Once we install Tenable in the studio, all the scanning is taken care of. No need to maintain anything, and one network person is enough for that. And SOC.

It's saving many things. If you go for each individual solution, for example, each cloud platform, web application, server, or endpoint has a different solution. Many products provide different solutions for each platform. But Tenable consolidates four into a single solution. From that point of view, it's cheaper than some other third-party vendors.

It's very expensive. I would give it an eight out of ten.

Overall, I would rate it an eight out of ten.

I use the product for control and visibility of all the user activities. I check if we have any vulnerabilities in the data. Mostly, I check if a privileged user is doing something wrong.

The product gives me visibility into user activities. They provided me with enough information to create a use case for privileged escalation. I also find some vulnerabilities which could be exploited to damage our company.

The solution enables integration with other solutions. It also provides machine learning features. The product gives us a lot of insight. It would be very difficult for us to do this manually.

Access management must be improved. The access manager, security tool, and access control need very big improvements. It would be nice if the product provided an agent for enforcing policies. For now, we can detect the violations but not respond. If we could enforce policies, it would be a quicker way to block something.

I have been using the solution for two months.

I rate the solution’s stability a ten out of ten.

I rate the tool’s scalability a ten out of ten.

The official language in Brazil is Portuguese, and the support team has difficulty speaking it. Not all my technical employees speak English, so I have some difficulty with the language.

The initial setup was very simple. The product is deployed on the cloud.

I got very good returns from the product.

The pricing is fair.

I recommend the solution to others. Overall, I rate the product a ten out of ten.