cybersecurity

3262 readers

4 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

founded 1 year ago

MODERATORS

shellsharks@infosec.pub

tweedge@infosec.pub

Asset and Vulnerability Scanning (infosec.pub)

submitted 7 months ago* (last edited 7 months ago) by redfox@infosec.pub to c/cybersecurity@infosec.pub

8 comments fedilink hide all child comments

This is not an ad.

Does anyone have experience with Tenable products?

I'm interested in real world experience regarding:

cost
effectiveness
ease of use

I'm playing with Tenable Security Center and Nessus Scanner. I'm early in the deployment, just looking for pointers and whether anyone has used it?

What alternatives is your org using if not?

Can you compare?

Edit, if anyone is interested, I can post results and opinions here also.

you are viewing a single comment's thread
view the rest of the comments

[–] GregoryTheGreat@programming.dev 3 points 7 months ago (1 children)

It is a requirement for all of the military projects I’ve worked on. Specifically ACAS which has Nessus as a component.

For a solo person doing scans for clients I think the cost is like $2k. Seems fine but I wouldn’t buy it without a guarantee I’d get my money out of it.

There is one other product I’ve tried from greenbone. Never used it professionally. Idk if I would trust it at the same level as Nessus.

[–] redfox@infosec.pub 1 points 7 months ago

Good info, thanks.

I am familiar with ACAS, which is why I am testing the products.

Fully capturing all the capabilities of scanning, auditing configuration seems like you could put countless hours into the implementation.

I imagine the ROI is high based on what I've seen.

Would you agree?