Action1 vs. Tenable Vulnerability Management

If your organization is like mine (nonprofit and tight budget) this product is for you. The first 200 endpoints are free and being we are a small organization, this product is perfect for us. I was able to use Action1 to upgrade all my endpoints from Windows 10 to 11 pretty much effortlessly. If you are not a nonprofit and have more endpoints over 200, this is still a great product to use as I don't find it very expensive to incorporate into your infrastructure.

Incentivized

I've been using this product since it began as an open source product, I really like it and for the money, I think it's probably the best choice for most companies who need a product like this. Over the years I've seen the interface change quite a bit and sometimes I think it's a bit unclear how to do certain things and the different packages can be confusing, these are the only reasons I'm giving it a 9 instead of a 10.

Incentivized

• Easy remote access to devices. That simple. We have some very unskilled users in the field where asking them to access their PC via conventional remote tools like TeamViewer, Anydesk, etc. was always a pain. Now, all they have to do is ensure their PC is online, and we can connect to them.
• Remote software deploy. Before Action1, we did have some GPOs and scripts, but again - being able to deploy to PCs outside of our office/LAN, is just beautiful. On top of the standard repository, being able to create new packages is very useful for our scenario.
• Inventory Reporting. Recently we had to identify PCs running old versions of Windows. Can't highlight enough how easy it is.

Incentivized

• Setup of the internal scanner was fairly simple and straight forward.
• An update came out for the internal scanner that allows you to add an Internal Certificate Authority for lookup.
• Has automated reporting to keep executives and compliance departments informed.
• Internal scanner can be configured to auto-update itself.
• "Recast Rules" allows your organization to redefine a vulnerabilities' classification, if it is not applicable or your disagree.
• External PCI scans allow you to remediate before submitting to Tenable.io for review.
• Tenable.io staff was very patient and helpful. They provided some limited guidance with remediation.
• Internal and External scans can be automated. schedule for the automated scans is very granular.

Incentivized

• Remote Access could use added functionality
• The deployment screens for update deferrals can be hard to understand at first and easy to skip since it carries some default info when you create a new automation rather than a more conspicuous prompt to update.

Incentivized

• Expensive - You do pay a slight premium for the best product in the space.
• Asset management is difficult to work with if you have a lot of asset turnover, the license can be ''held'' for 3-6 months after the asset is gone from your environment.

Incentivized

Price, functionality, and continuous improvement of the product.

Incentivized

We like to renew tenable each year we have had it so far.

Incentivized

Action1 has taken many of the tasks that are time consuming and made them simple automated tasks that can be run on a schedule. I can schedule tasks to run off-hours and know that they will be done and I no longer have worry about it. As someone who does IT support for a living, it just makes my job so much simpler with less stress.

Overall it is good, it took a little while to understand it and figure things out but once you have a good grasp on it then, it is very good.

Incentivized

I never contacted support services

Incentivized

Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)

Incentivized

very easy to start using it.

Incentivized

After looking at different solutions, Action1 [Cloud Remote Monitoring and Management Solution] was the perfect fit for us that delivered all of the features we wanted without being as costly as some of the others alternatives we've looked at. There was no minimum endpoint count and they even offer up to 50 endpoints for free, which is really great for a small organization like us to help us lower our starting costs and still allows us to grow at our pace without having to commit to a defined amount of endpoints to start.

Tenable.io has a comparable set of features, with excellent support and a competitive price. After less than desirable experiences with another company, we moved to Tenable and haven't looked back since.

Incentivized

• Saved hours per week on patching and able to ensure a 100% patching success rate.
• Able to create custom alerting on potential problems as well as able to create some automation to automatically address problems.
• Improved support to our remote locations and users.
• Custom deployments allow us to have a mechanism to deploy custom applications we build as well as other third party applications we need to distribute.

Incentivized

• Since this is a requirement for our PCI compliance and the cost is relatively low, the ROI isn't really something we need to think too much about, Tenable's pricing is fair and affordable.

Incentivized