Quarterly automated scans have strengthened our global security posture and guided faster remediation
What is our primary use case?
I think we use Tenable Vulnerability Management primarily for our internal use. We are not a reseller; we are a customer.
We have a set of IPs across the globe, and we conduct this scan once a quarter of all the IPs combined. This scanner has updated information with respect to vulnerabilities that exist in the open. We perform vulnerability scans of all the IPs in order to ensure that no vulnerability exists in our environment, infrastructure, or network. We run vulnerability scans which are automated in nature and scheduled over the weekend to make sure that all the IPs are up to date. Once in a quarter, all IPs are scanned and a vulnerability report is generated. This report tells us whether there are low, medium, or high critical vulnerabilities that exist. We have a remediation plan for the high, medium, and low vulnerabilities in terms of the amount of time that we should be taking in order to patch these vulnerabilities. This tool keeps our information security posture high. We also carry out aging analysis because there are some vulnerabilities that cannot be patched due to dependencies. We actively carry out aging analysis in order to see if there are some vulnerabilities that are still in the system for more than one month or two months, and what the reason is. We actively work with all of the business teams and the IT setup within our system is quite regimented in order to run the scans once in a quarter for all the IPs.
What is most valuable?
I think their automated vulnerability scan and the scanning engine of Tenable Vulnerability Management are valuable. There are agents that you can deploy, and you can run the scans on those IPs on an automated basis. The automated scanning feature is probably the most important. They also have a good remediation workflow which can be integrated with your own internal workflow. You can do automated tracking of closure of the vulnerabilities. The ease of use, the automated scanning facility, and their good support mechanism are all valuable. If you were to get stuck somewhere, they can readily make their customer service or technical teams available to take care of our needs. Automated vulnerability scanning is the feature which makes life a little easier.
What needs improvement?
I don't think that there is any very specific area where enhancements need to happen in Tenable Vulnerability Management's feature sets. The only area which possibly is not a part of the feature, but Tenable can look at, is to make their pricing more competitive.
For how long have I used the solution?
I have been using Tenable Vulnerability Management for more than five years.
What do I think about the stability of the solution?
I would give Tenable Vulnerability Management a nine out of ten for stability because the downtime has been next to minimal. We have not faced any kind of outages in terms of services. Reliability is absolutely high.
How would you rate stability?
What do I think about the scalability of the solution?
I think the scalability level of Tenable Vulnerability Management is fairly good. I don't think we have really found that wanting. I would give that an eight out of ten. We have not faced any problems so far.
With the growing needs of our company, Tenable Vulnerability Management is able to safely adapt.
How would you rate scalability?
How are customer service and support?
We had used Tenable's expert support services in order to make sure that we run Tenable Vulnerability Management on a continuous basis and are able to utilize their services. At the time of the implementation, we had taken the help of Tenable's expert support to be able to help us use this feature at the outset.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
We have used QualysGuard before using Tenable Vulnerability Management.
We decided to switch from QualysGuard to something else because these were two different companies. This was the previous company where I had exposure to QualysGuard. We have never made any change from Tenable in the current company.
How was the initial setup?
When I started working at my current company, Tenable Vulnerability Management was already there.
What about the implementation team?
I was involved in the decision, but we have chosen Tenable and we continue using Tenable Vulnerability Management in the current company. I was a part of the purchase process.
What's my experience with pricing, setup cost, and licensing?
I would not say very expensive for Tenable Vulnerability Management; it is not prohibitive, but at the same time, there are some other tools in the marketplace which are offering the same kind of services that Tenable offers, the same kind of features that Tenable has offered at a lesser cost.
What other advice do I have?
I use Tenable Vulnerability Management, and that is the tool that I have primary experience with.
Apart from zero-day vulnerability, which obviously none of the tools would know about, I think the scanning engine of Nessus, part of Tenable Vulnerability Management, is quite up-to-date. It provides details on how the remediation should take place and provides detailed steps on how the remediation can be undertaken, which is quite helpful for the various application teams in order to understand. Their platform is something which is quite up-to-date. It appears that in the back-end they have the right set of threat intelligence feeds that come in from all different sources. I would assume that their AI engine and also their database is quite updated. From the perspective of being up to date, we feel very comfortable because we do rely on and trust their AI engine which their scanning facility is powered with.
The importance of real-time risk prioritization for our organization's security strategy is very high. These are the times where you cannot really go loose at all. Remediation becomes prioritized for all organizations. It is extremely important that at least the highly critical vulnerabilities are patched within 24 to 48 hours because they are high targets and valuable targets for adversaries. Therefore, risk prioritization is probably extremely important for organizations to keep these in the highest priority of any activity.
We have not yet integrated Tenable Vulnerability Management as much. We are using Tenable on a standalone basis. We have not yet done an integration with any GRC tool or any other tool. As of now, we are using Tenable as an independent tool.
Tenable Vulnerability Management is deployed on-cloud in our organization, and we are using Amazon Web Services as our cloud provider.
I would give Tenable Vulnerability Management a nine out of ten rating. This is not a matter of concern because, apart from the costing part, which was pretty much okay when we signed up, over a period of time they have been increasing their license fee. That is the only point which I believe that they could possibly look at working upon. Otherwise, it is a nine out of ten for sure. My overall review rating for Tenable Vulnerability Management is eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Versatility and Ease: Complete and Intuitive Tool
What do you like best about the product?
I like the versatility of the tool, the ease of use, the dashboards are very intuitive. The tool incorporates the best scanning, visibility, reporting, and other excellent features. Customer support is immediate, the implementation is very simple and intuitive, in just 1 day we were able to carry out the implementation and the necessary integrations very easily.
What do you dislike about the product?
I use the tool daily and, particularly, I haven't seen anything I didn't like yet.
What problems is the product solving and how is that benefiting you?
One of the problems solved was the lack of visibility we had in the environment. With Tenable, we managed to mitigate this lack and now we have a macro view regarding the vulnerabilities of our environment.
the best software
What do you like best about the product?
Ease of Use. Frequency of Use, interface
What do you dislike about the product?
nothing, tenable is the best solutions to manage vulnerabilities
What problems is the product solving and how is that benefiting you?
management process of vulnerabilities to compliance PCI DSS
Great Scanning Capabilities, But User Account Setup Is Frustrating
What do you like best about the product?
I like the ability to scan internal and external resources as well as web applications. The app has great filtering capabilities as well as tagging, allowing you to compartmentalize sites and services into containers that you can scan and report on separately.
What do you dislike about the product?
It's annoying to create user accounts where they do not share the same domain as you. We take care of a lot of different sites and want to allow users to login to view their vulnerabilities but this limitation makes it difficult. I have to put in a ticket every time I want to add a new user's domain. The cost of web application scanning is much higher than normal licensing.
What problems is the product solving and how is that benefiting you?
Tenable vulnerability management allows us to scan internal and external assets every day/week/month on demand or on schedule. The findings and vulnerabilities are stored for months and allows you to see the history of vulnerability for a particular asset, which is very helpful. It helps prioritize remediation effort by using the AES scoring matrix to determine where to put your time.
Outstanding TVM Features and Support, Needs Better Asset Licensing Controls
What do you like best about the product?
SentinelOne’s Threat and Vulnerability Management (TVM) product is a strong solution with a rich set of features and excellent overall performance. The platform provides deep visibility, clear remediation guidance, and a very user-friendly interface that makes it easy to prioritize and act on vulnerabilities.
Support from SentinelOne has also been outstanding — responsive, knowledgeable, and proactive in addressing questions or issues.
Also, deployment is a snap.
What do you dislike about the product?
The only drawback I've encountered is around asset licensing management. It would be helpful to have more granular controls for excluding non-relevant or "ghost" assets, such as IoT or VOIP devices, from consuming licenses. Enhancing this capability would make an already excellent product even better.
I'd also like to see better reporting around the management of vulnerabilities over 90-plus days old in the environment and agents.
What problems is the product solving and how is that benefiting you?
It addresses my Visibility Gap and threat graph, allowing me to understand better where my risks are and prioritize them in an automated way that is easy for my stakeholders to understand and act on.
User-Friendly Interface with Detailed Insights, But Lacks Configuration Management
What do you like best about the product?
The interface of the platform, easy of use and implementation, detailed information about assets and vulnerabilities.
What do you dislike about the product?
Tenable collects all information about assets, they could enhance their platform to be used as configuration management as well.
What problems is the product solving and how is that benefiting you?
What most critical vulnerabilities we should prioritize.
Absolutely Love This Software!
What do you like best about the product?
The best feature of Tenable Vulnerability Management is the Vulnerability Priority Rating (VPR). Unlike standard CVSS scores, VPR uses threat intelligence to accurately predict which vulnerabilities are most likely to be exploited in the real world. This powerful risk-based prioritization allows security teams to efficiently focus remediation efforts on the few issues that truly matter
What do you dislike about the product?
The platform can be quite expensive, and the licensing model (often based on the number of assets or resources scanned) can feel prohibitive or complex to manage for organizations with tight budgets or rapidly changing infrastructure.
What problems is the product solving and how is that benefiting you?
PCI DSS compliance and risk based vulnerability prioritization
Absolutely perfect product we reviewed several other options before selecting this one and recommend
What do you like best about the product?
The Tenable solution addressed all our needs, from identifying assets within our environment to performing vulnerability scans both with and without privileged access. I also appreciate the ability to create groups, such as by location, which makes organization much easier. Additionally, the reporting features are excellent right out of the box.
What do you dislike about the product?
At the moment, there isn't anything that I particularly dislike.
What problems is the product solving and how is that benefiting you?
When we implemented this, we had several locations across the US and required a solution capable of addressing all the challenges associated with managing multiple sites. We needed a tool that could perform vulnerability scanning, assist us in identifying assets within our network, and provide reporting suitable for both technical teams and leadership.
Powerful and very up-to-date tools
What do you like best about the product?
I like the large number of plugins available, the speed with which they are released, and the frequency of updates. I find the entire scanning process fast and efficient.
What do you dislike about the product?
I find the reporting part to be quite limited, so much so that we need to process the data externally to generate more refined and personalized reports.
What problems is the product solving and how is that benefiting you?
Efficient and rapid detection of vulnerabilities in the company's infrastructure. This benefits us by reducing remediation time and, consequently, risk exposure.
Tenable the Gold Standard
What do you like best about the product?
Incredible robust, informative and easy to understand reports. Versatile in the best ways.
What do you dislike about the product?
Sometimes it is a bit complex, especially when refining reports.
What problems is the product solving and how is that benefiting you?
Information Security Program
