Automox vs. Tenable Vulnerability Management

It is perfectly suited for organizations with a small IT staff and large amount of devices. It's also perfect for pushing software to machines that are not on the network or VPN. It's less effective for server patch management. I like to have a little more control of my server patching

Incentivized

I've been using this product since it began as an open source product, I really like it and for the money, I think it's probably the best choice for most companies who need a product like this. Over the years I've seen the interface change quite a bit and sometimes I think it's a bit unclear how to do certain things and the different packages can be confusing, these are the only reasons I'm giving it a 9 instead of a 10.

Incentivized

• Excellent support for Windows-based systems. Rarely have any issues updating those systems.
• When issues do arise, the Automox support team has been very responsive and informative of solutions (or where projects are on potential roll out dates).
• The user interface is intuitive and easy to use.

Incentivized

• Setup of the internal scanner was fairly simple and straight forward.
• An update came out for the internal scanner that allows you to add an Internal Certificate Authority for lookup.
• Has automated reporting to keep executives and compliance departments informed.
• Internal scanner can be configured to auto-update itself.
• "Recast Rules" allows your organization to redefine a vulnerabilities' classification, if it is not applicable or your disagree.
• External PCI scans allow you to remediate before submitting to Tenable.io for review.
• Tenable.io staff was very patient and helpful. They provided some limited guidance with remediation.
• Internal and External scans can be automated. schedule for the automated scans is very granular.

Incentivized

• initial deployment of agents to all end points was a challenge, would have been great if there was a way for Automox to discover and install.
• Sometimes upgrading the Automox client which becomes old due to an end point not connecting for a long time becomes challenging as it becomes incompatible and has to be upgraded manually
• It would good to have a functionality where an end point device can be turned into a brick if desired in cases where the device is not returned back after an employee is terminated. This should also have the option of turning it back into an active device if we choose to

Incentivized

• Expensive - You do pay a slight premium for the best product in the space.
• Asset management is difficult to work with if you have a lot of asset turnover, the license can be ''held'' for 3-6 months after the asset is gone from your environment.

Incentivized

The system is really simple. We pushed the installer out through Group policy. Devices connected can get further defined by Tags or Groups.

Incentivized

We like to renew tenable each year we have had it so far.

Incentivized

After using a combination of WSUS and group policy to manage patching on a large number of devices, it was excellent to move to a single-pane experience where patch policies, restart schedules, reports, and device status can be seen easily and quickly. Its pre-patch report on policies is particularly handy so you can check if devices will take the appropriate action before it's run.

Incentivized

In my experience, they were responsive but the fixes were more like bandaids than a fix for the underlying problems which they admitted were on their end.

Incentivized

Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)

Incentivized

We stoppped using PDQ because it required our users to connect to the corporate VPN. It might take months for some remote users to receive a patch, and often we would have to schedule time with them one-on-one to ensure that it got done. With Automox, we don't have to do any of that - it just happens silently in the background.

Incentivized

Tenable.io has a comparable set of features, with excellent support and a competitive price. After less than desirable experiences with another company, we moved to Tenable and haven't looked back since.

Incentivized

• Automox allows us to fix vulnerabilities in the shortest amount of time ever.
• The automated patching and end point management features have made our jobs much easier.
• We get to focus on more important tasks and not have to manually patch the operating systems.

Incentivized

• Since this is a requirement for our PCI compliance and the cost is relatively low, the ROI isn't really something we need to think too much about, Tenable's pricing is fair and affordable.

Incentivized