Nessus (BYOL)
Tenable, Inc. | 10.8.3Linux/Unix, Amazon Linux 20240903 - 64-bit Amazon Machine Image (AMI)
External reviews
External reviews are not included in the AWS star rating for the product.
How Nessus helps in security audits
What do you like best about the product?
Nessus helps organizations during the auditing process by providing clear reports of the vulnerabilities as they are found during the scanning. The agent helps detect vulnerable software, misconfigured settings and other security-related issues like patches. It provides the alert along with a CVE score which helps to identify the criticality and impact of the vulnerability on the organization's security. It shows the vulnerability which really needs the attention of the security team and gives accurate scanning and provides the view that which vulnerabilities should be patched first. Nessus plugin contains the vulnerability information with the remediation action which brings easy for the security team to remediate the vulnerability easily.
What do you dislike about the product?
Sometimes when we are scanning the vulnerabilities in a large environment it takes time like 2-3 days to find all the vulnerabilities of the whole environment. The scanning requires downtime from the organization so that it does not affect the production environment as sometimes it brings high traffic which interrupts the production environment.
What problems is the product solving and how is that benefiting you?
This tool, Tenable Nessus, backs the organization on its way to strengthening its cybersecurity defenses through continuous network scanning for vulnerabilities, including zero-day threats and misconfigurations, such that timely remediation can be enacted to minimize the risk of a possible breach. It allows organizations to comply with various regulations/audits (e.g., PCI DSS, HIPAA) through automated audits and real-time reporting, thereby saving organizations from penalties and maintaining the trust of their stakeholders. Therefore, it gives organizations insight into present risk prioritization and integrates into IT workflows to optimize resource allocation, reduce operational overhead, and act as a constructive tool in an organization's long-term perspective to enhance security.
- Leave a Comment |
- Mark review as helpful
AL2 based AMI Image
this help us to deploy via Service Catalog.
that is very helpful.
but currently, AMI image is build based on AL2, not 2023.
AL2 is no longer supported after July 2025.
so we want Tenable to provide AL2023 based nessus AMI.
Tenable Nessus vulnerability manager
What do you like best about the product?
The platform is very intuitive, it is easy to operate without prior knowledge, and additionally, the reliability of the results obtained at the vulnerability level is very accurate. The reports are easy to interpret and generate high value for the company for decision-making.
What do you dislike about the product?
That the technology is still On-Premises and this leads to expenses in infrastructure, which generates additional costs for the organization and depreciation in this used hardware.
What problems is the product solving and how is that benefiting you?
Identification of exploitable vulnerabilities, recognition of the infrastructure, and information for their mitigation.
Generation of managerial reports.
Generation of managerial reports.
Tenable is a must for Vulnerability Scanning
What do you like best about the product?
Tenable Nessus is easy to setup and easy to navigate. The reporting gives good detail to help remediate the vulnerabilities.
What do you dislike about the product?
I have been using Tenable Nessus for many years and I can't say I have any dislikes for the product.
What problems is the product solving and how is that benefiting you?
Tenable Nessus helps keep the network secure by finding vulnerabilities before they become an issue.
Nessus is a great tool for vulnerability scanning and remediation guidance
What do you like best about the product?
Nessus is a powerful tool with extensive reporting and automation.
What do you dislike about the product?
I haven't found anything to dislike about Nessus.
What problems is the product solving and how is that benefiting you?
Tenable Nessus scans our external and internal network resources, analyzes vulnerabilities and provides guidance on mitigating those risks. Scheduled scan results are sent to our team to analyze and respond accordingly.
Tenable Nessus
What do you like best about the product?
Tenable Nessus has been the industry standard for many years. This is because it will do everything that you need it to do while scanning your infrastructure.
What do you dislike about the product?
Nessus may require some technology knowledge higher than a normal user.
What problems is the product solving and how is that benefiting you?
Nessus shines a light on the short comings of some security configurations in our environment.
One of the best vulnerability scanners on the market
What do you like best about the product?
Nessus was very easy to install, and we were up and running in very little time. There are lots of various scan type options to choose from. Our third party auditors also use Nessus for internal vulnerability scans, and we were able to import their scanning template in order to do accurate post remediation scans. We were able to easily setup a weekly scan schedule. Product updates are simple and straight forward, and we recieve notification when new versions are available. The price was also within our budget.
What do you dislike about the product?
I wish Nessus had a vulnerability remediation option. Finding all the detailed vulnerabilities is only half the battle, researching the vulnerability and the fix is also time consuming. Nessus does have links to the CVE or KB docs, and many times remediation reccomendations, but the patching process is still manual. I realize that automatic remediation may not always be the best practice depending on the vulnerability, the system/device, and various other factors, but possibly some options for simple patches would be very useful.
What problems is the product solving and how is that benefiting you?
It finds and categorizes all vulnerabilities on all device types. Our previous product would only work with Windows devices for instance, so you are not getting a complete picture of your entire network. Vulnerabilities are categorized based on criticality, so you can prioritize your remediation process.
Nessus Professional has the best price/coverage ratio of the industry
What do you like best about the product?
Tenable Nessus Professional is widely praised for several key features that make it a preferred choice for vulnerability management BUT I want to focus my review on why it make sense for you if you have a lot of IP to scan.
Most of the scanners have licenses per IP, so if you have wide ip ranges, licenses fee would be astronomious.
You will need to accomodate the limited reporting and vulnerability management feature of the proffessional version.
Most of the scanners have licenses per IP, so if you have wide ip ranges, licenses fee would be astronomious.
You will need to accomodate the limited reporting and vulnerability management feature of the proffessional version.
What do you dislike about the product?
Nessus Professional need some good process OR automation to get the most of it as you dont have any 'quality of life' feature like dashboard, tracking and limited automation.
What problems is the product solving and how is that benefiting you?
Tenable Nessus solves problems related to cybersecurity, primarily by helping organizations identify vulnerabilities in their networks, systems, and applications. The benefits include enhanced security and compliance.
Great Tool
What do you like best about the product?
The Nessus scans give us insight into areas we might have vunerabilities
What do you dislike about the product?
The past scans can take up disk space. I haven't found a good way to automatically remove the old ones.
What problems is the product solving and how is that benefiting you?
Nessus scans our systems for vulnerabilities. We are able to prioritize our updates from the scans.
Smooth Experience
What do you like best about the product?
I started using Nessus as a undergrad student and it was so easy that I could run scans without any tutorials.
What do you dislike about the product?
There is nothing to like about it. Although the UI can be modernise
What problems is the product solving and how is that benefiting you?
I learnt how to use Vulnerability scans to find out threats
showing 1 - 10