Automox is an endpoint management solution from the company of the same name in Boulder. Cloud-based and globally available, Automox enforces OS & third-party patch management, security configurations, and custom scripting across Windows, Mac, and Linux from a single console. With it, IT and SecOps can gain control and share visibility of on-prem, remote and virtual endpoints without the need to deploy costly infrastructure. Automox aims to reduce corporate risk while raising operational…
$2
per month per endpoint
Tenable Nessus
Score 8.3 out of 10
N/A
Tenable headquartered in Columbia offers Nessus, a vulnerability scanning and security assessment solution used to analyze an entity's security posture, vulnerability testing, and provide configuration assessments.
Automox requires no server installation or maintenance. Pricing is competitive. It is cloud-based with a high level of uptime. I would recommend it to mid-sized businesses with a number of remote locations and different operating systems. It is simple to use and requires no …
It is perfectly suited for organizations with a small IT staff and large amount of devices. It's also perfect for pushing software to machines that are not on the network or VPN. It's less effective for server patch management. I like to have a little more control of my server patching
Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.
Excellent support for Windows-based systems. Rarely have any issues updating those systems.
When issues do arise, the Automox support team has been very responsive and informative of solutions (or where projects are on potential roll out dates).
With Nessus we can find the missing critical patches for a server or workstations.
Nessus points out any vulnerable or outdated software Technologies used in the system, thus eliminating any chances for security flaws being turned up.
Nessus typically points any configuration level issues in accordance with the OWASP guidelines. Even the configuration of SSL related which are most of the time handled by some vendors or 3rd parties.
Nessus not only lists out these Vulnerabilities but describes clearly the vulnerabilities in details with its thousands of plugins updated regularly, the tool also recommends solution with practical details of easy implementation.
initial deployment of agents to all end points was a challenge, would have been great if there was a way for Automox to discover and install.
Sometimes upgrading the Automox client which becomes old due to an end point not connecting for a long time becomes challenging as it becomes incompatible and has to be upgraded manually
It would good to have a functionality where an end point device can be turned into a brick if desired in cases where the device is not returned back after an employee is terminated. This should also have the option of turning it back into an active device if we choose to
Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.
After using a combination of WSUS and group policy to manage patching on a large number of devices, it was excellent to move to a single-pane experience where patch policies, restart schedules, reports, and device status can be seen easily and quickly. Its pre-patch report on policies is particularly handy so you can check if devices will take the appropriate action before it's run.
In my experience, they were responsive but the fixes were more like bandaids than a fix for the underlying problems which they admitted were on their end.
I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.
We stoppped using PDQ because it required our users to connect to the corporate VPN. It might take months for some remote users to receive a patch, and often we would have to schedule time with them one-on-one to ensure that it got done. With Automox, we don't have to do any of that - it just happens silently in the background.
Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with Metasploit in order to show to the IT managers the importance of the software/hardware hardening.
Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners.
The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan.
Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews.
