Action1 vs. Tenable Vulnerability Management

For small teams having to deal with significant ammount of devices, I can't express how useful Action1 is. With very small effort, you can easily keep track of your devices, keep them up to date, deploy new software to your users, create recurring reports/alerts and so on. Initially, the 100 endpoints for free was also a nice touch. Now, even better since they increased to 200. For the forseeable future, I have not to worry about costs and still can't believe it's a full solution for free, not those freeware stuff where what you really desire is behind a cost.

Incentivized

Tenable.io is a cost effective Internal and External scanner. The Internal scanner came with a .ova, so it was very simple and quick to deploy it into our ESXi environment. It has a cloud-based dashboard for management and the internal scanner is configured to auto-update from Tenable.io. The license came with 4 External PCI scans (with remediation) a year.

Incentivized

• Provide a friendly and easy-to-use interface to manage all my endpoints
• Provide automated patch management that can be placed on a schedule. Patch approval is easy and intuitive
• Scan for available software updates and readily report critical updates
• Uploading and installing software via the Action1 console is very easy to use
• The app deployment works very well and fast

• Wide range of capabilities that can be customized to fit each user's environment and needs
• Provides high-quality data and insights into detected vulnerabilities
• Great customer support

Incentivized

• Lots of times Action1 will identify a program that needs to be patched, but then not really have a path laid out to get that done...so they just remain as they are, but are tagged as such.
• Really wants to replace the windows update mechanism. Resists (or did at least) you if you try to keep updates as they are and update occasionally from Action1
• Could develop the scripts section a bit more, looked pretty sparse last time I checked it out.

Incentivized

• Configuration is not always intuitive, but the comprehensive training and documentation comes to the rescue.
• The mix of classic and beta UIs currently is confusing and we find the classic UI is actually better.

Incentivized

Price, functionality, and continuous improvement of the product.

Incentivized

We like to renew tenable each year we have had it so far.

Incentivized

Agent deployment is simple (and silent) - once that is done, you're good to go. Everything is simple, centralized and very easy to work with. There isn't one aspect of this platform that requires crawling over forums and Google, it just works!

Incentivized

Overall it is good, it took a little while to understand it and figure things out but once you have a good grasp on it then, it is very good.

Incentivized

I never contacted support services

Incentivized

Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)

Incentivized

very easy to start using it.

Incentivized

After looking at different solutions, Action1 [Cloud Remote Monitoring and Management Solution] was the perfect fit for us that delivered all of the features we wanted without being as costly as some of the others alternatives we've looked at. There was no minimum endpoint count and they even offer up to 50 endpoints for free, which is really great for a small organization like us to help us lower our starting costs and still allows us to grow at our pace without having to commit to a defined amount of endpoints to start.

I think Tenable and Qualys have a lot of similarities, I continue to go back to Tenable because of my familiarity and comfort level with it. I've also used a company called SecurityMetrics which has vulnerability scanning included but it is not as comprehensive as Tenable.

Incentivized

• Saved hours per week on patching and able to ensure a 100% patching success rate.
• Able to create custom alerting on potential problems as well as able to create some automation to automatically address problems.
• Improved support to our remote locations and users.
• Custom deployments allow us to have a mechanism to deploy custom applications we build as well as other third party applications we need to distribute.

Incentivized

• We're able to mitigate over 90% of our vulnerability risk without too much effort. It helps find where automated patching fails and we can plan a fix from the findings.
• A side effect of our scanning reveals new devices on our network that aren't cleared to be.

Incentivized