Tenable Attack Surface Management vs. Tenable Vulnerability Management

Tenable Attack Surface Management

Tenable Vulnerability Management

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Tenable Attack Surface Management	Score 6.1 out of 10	N/A	Tenable Attack Surface Management (formerly Tenable.asm, and previously Bit Discovery) is an external attack surface management (EASM) solution that integrates into a vulnerability management platform. Tenable.asm continuously maps the entire internet and discovers connections to internet-facing assets so that users can assess the security posture of the entire external attack surface, or those facets of an organization that face the public, and the Internet. It can be used to access an attack…	N/A
Tenable Vulnerability Management	Score 9.5 out of 10	N/A	Vulnerability management specialist Tenable offers their cloud application and container security platform Tenable Web App Scanning (formerly Tenable.io), a vulnerability management tool that emphasizes visibility of web applications, automatic scanning, and a unified view of cloud infrastructure and possible inconsistencies indicating a vulnerability.	N/A

Pricing

Tenable Attack Surface Management

Tenable Vulnerability Management

Editions & Modules

No answers on this topic

Offerings

Pricing Offerings
Tenable Attack Surface Management	Tenable Vulnerability Management
Free Trial
No	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

Additional Details

—

More Pricing Information

Community Pulse
	Tenable Attack Surface Management	Tenable Vulnerability Management
Considered Both Products	Tenable Attack Surface Management Stephan van der Merwe Cyber Security Analyst Chose Tenable Attack Surface Management We didn't test any other solutions. Because to be frank no other solution can compare feature-wise as well as ease of use. Which makes reselling and supporting any Tenable product such an obvious choice for us. Incentivized Helpful?	Tenable Vulnerability Management Verified User Anonymous Chose Tenable Vulnerability Management I think Tenable and Qualys have a lot of similarities, I continue to go back to Tenable because of my familiarity and comfort level with it. I've also used a company called SecurityMetrics which has vulnerability scanning included but it is not as comprehensive as Tenable. Incentivized Helpful? Randy Munroe Information Security Analyst Chose Tenable Vulnerability Management Tenable.io was a clear winner in regards to features and capability when compared to OpenVAS, Qualys, and Nexpose. OpenVAS is a fork of an older version of Nessus Scanner(from Tenable) and has been updated over the years to a great free alternative. It takes a lot more manual … Incentivized Helpful? Verified User Anonymous Chose Tenable Vulnerability Management Skipping since I don't have too much familiarity with similar products. Incentivized Helpful? Matthew White Cloud Security Architect/SQL Server DBA Chose Tenable Vulnerability Management Tenable.io has a comparable set of features, with excellent support and a competitive price. After less than desirable experiences with another company, we moved to Tenable and haven't looked back since. Incentivized Helpful? Verified User Anonymous Chose Tenable Vulnerability Management Rapid7 is actually very comparable to Tenable.io in terms of automated scans, automated reporting, internal and external scanners, and remediation of external scans. But for less than the cost of a Rapid7 solution that comes with internal scans only, I received more hosts … Incentivized Helpful?

Features

Tenable Attack Surface Management

Tenable Vulnerability Management

Threat Intelligence

Comparison of Threat Intelligence features of Product A and Product B
	Tenable Attack Surface Management 9.3 Ratings 16% above category average	Tenable Vulnerability Management 8.4 Ratings 6% above category average
Threat Recognition	9.00 Ratings	10.00 Ratings
Vulnerability Classification	10.00 Ratings	10.00 Ratings
Automated Alerts and Reporting	10.00 Ratings	4.00 Ratings
Threat Analysis	9.00 Ratings	10.00 Ratings
Threat Intelligence Reporting	9.00 Ratings	5.00 Ratings
Automated Threat Identification	9.00 Ratings	10.00 Ratings
Network Analytics	00 Ratings	10.00 Ratings

Vulnerability Management Tools

Comparison of Vulnerability Management Tools features of Product A and Product B
	Tenable Attack Surface Management 9.4 Ratings 15% above category average	Tenable Vulnerability Management 8.8 Ratings 8% above category average
IT Asset Realization	10.00 Ratings	8.00 Ratings
Authentication	9.00 Ratings	10.00 Ratings
Configuration Monitoring	9.00 Ratings	8.00 Ratings
Web Scanning	9.00 Ratings	8.00 Ratings
Vulnerability Intelligence	10.00 Ratings	10.00 Ratings

Best Alternatives
	Tenable Attack Surface Management	Tenable Vulnerability Management
Small Businesses	Action1 Score 9.5 out of 10	Action1 Score 9.5 out of 10
Medium-sized Companies	Action1 Score 9.5 out of 10	Action1 Score 9.5 out of 10
Enterprises	CrowdStrike Falcon Score 9.0 out of 10	CrowdStrike Falcon Score 9.0 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	Tenable Attack Surface Management	Tenable Vulnerability Management
Likelihood to Recommend	10.0 (0 ratings)	10.0 (0 ratings)
Likelihood to Renew	- (0 ratings)	9.0 (0 ratings)
Usability	- (0 ratings)	8.0 (0 ratings)
Support Rating	10.0 (0 ratings)	8.8 (0 ratings)

User Testimonials
	Tenable Attack Surface Management	Tenable Vulnerability Management
Likelihood to Recommend	Tenable Attack Surface Management simplifies not just your vulnerability management needs but also the mapping and discovery of known and unknown internet assets. All this within a very intuitive online dashboard, making it relatively easy to setup and configure. Without having to spend hours of training time in order to use basic functions. Incentivized Stephan van der Merwe Cyber Security Analyst Read full review	Tenable.io is a cost effective Internal and External scanner. The Internal scanner came with a .ova, so it was very simple and quick to deploy it into our ESXi environment. It has a cloud-based dashboard for management and the internal scanner is configured to auto-update from Tenable.io. The license came with 4 External PCI scans (with remediation) a year. Incentivized Verified User Anonymous Read full review
Pros	Maps external facing infrastructure and continuously updates this data Can display the scan results in Business Context to help with management reporting Great Asset Management tool Powerful vulnerability scanning engine Incentivized Stephan van der Merwe Cyber Security Analyst Read full review	Wide range of capabilities that can be customized to fit each user's environment and needs Provides high-quality data and insights into detected vulnerabilities Great customer support Incentivized Verified User Anonymous Read full review
Cons	No improvement can be suggested at this moment as it fits our needs and more Incentivized Stephan van der Merwe Cyber Security Analyst Read full review	Configuration is not always intuitive, but the comprehensive training and documentation comes to the rescue. The mix of classic and beta UIs currently is confusing and we find the classic UI is actually better. Incentivized Matthew White Cloud Security Architect/SQL Server DBA Read full review
Likelihood to Renew	No answers on this topic	We like to renew tenable each year we have had it so far. Incentivized Verified User Anonymous Read full review
Usability	No answers on this topic	Overall it is good, it took a little while to understand it and figure things out but once you have a good grasp on it then, it is very good. Incentivized Verified User Anonymous Read full review
Support Rating	Very fast and helpful support staff. From the Vendor as well as the local Distributor. Support like that makes adding such a product to our MSSP offering the obvious choice. Incentivized Stephan van der Merwe Cyber Security Analyst Read full review	Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.) Incentivized Randy Munroe Information Security Analyst Read full review
Alternatives Considered	We didn't test any other solutions. Because to be frank no other solution can compare feature-wise as well as ease of use. Which makes reselling and supporting any Tenable product such an obvious choice for us. Incentivized Stephan van der Merwe Cyber Security Analyst Read full review	I think Tenable and Qualys have a lot of similarities, I continue to go back to Tenable because of my familiarity and comfort level with it. I've also used a company called SecurityMetrics which has vulnerability scanning included but it is not as comprehensive as Tenable. Incentivized Verified User Anonymous Read full review
Return on Investment	This solution is most definitely a great Return on Investment because it can quickly and accurately discover and report on our clients' entire Internet facing real estate. And keep this data updated with any changes. Incentivized Stephan van der Merwe Cyber Security Analyst Read full review	We're able to mitigate over 90% of our vulnerability risk without too much effort. It helps find where automated patching fails and we can plan a fix from the findings. A side effect of our scanning reveals new devices on our network that aren't cleared to be. Incentivized Randy Munroe Information Security Analyst Read full review
ScreenShots