AWS CloudTrail vs. Tenable Attack Surface Management

AWS CloudTrail

Tenable Attack Surface Management

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
AWS CloudTrail	Score 8.5 out of 10	N/A	AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of an AWS account. With CloudTrail, users can log, continuously monitor, and retain account activity related to actions across AWS infrastructure. CloudTrail provides event history of AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking,…	N/A
Tenable Attack Surface Management	Score 10.0 out of 10	N/A	Tenable Attack Surface Management (formerly Tenable.asm, and previously Bit Discovery) is an external attack surface management (EASM) solution that integrates into a vulnerability management platform. Tenable.asm continuously maps the entire internet and discovers connections to internet-facing assets so that users can assess the security posture of the entire external attack surface, or those facets of an organization that face the public, and the Internet. It can be used to access an attack…	N/A

Pricing

AWS CloudTrail

Tenable Attack Surface Management

Editions & Modules

No answers on this topic

Offerings

Pricing Offerings
AWS CloudTrail	Tenable Attack Surface Management
Free Trial
Yes	No
Free/Freemium Version
Yes	No
Premium Consulting/Integration Services
Yes	No

Entry-level Setup Fee

No setup fee

Additional Details

You can view, filter, and download the most recent 90 days of your account activity for all management events in supported AWS services free of charge. You can set up a trail that delivers a single copy of management events in each region free of charge. Once a CloudTrail trail is set up, Amazon S3 charges apply based on your usage. You will be charged for any data events or additional copies of management events recorded in that region. In addition, you can choose CloudTrail Insights by enabling Insights events in your trails. CloudTrail Insights analyzes write management events, and you are charged based on the number of events that are analyzed in that region.

—

More Pricing Information

Community Pulse
	AWS CloudTrail	Tenable Attack Surface Management
Top Pros	Pro Easy implementation Pro Extremely powerful Pro Ec2 instance	No answers on this topic
Top Cons	Minus 90 days Minus User interface	No answers on this topic

Features

AWS CloudTrail

Tenable Attack Surface Management

Threat Intelligence

Comparison of Threat Intelligence features of Product A and Product B
	AWS CloudTrail - Ratings	Tenable Attack Surface Management 9.3 1 Ratings 15% above category average
Threat Recognition	00 Ratings	9.01 Ratings
Vulnerability Classification	00 Ratings	10.01 Ratings
Automated Alerts and Reporting	00 Ratings	10.01 Ratings
Threat Analysis	00 Ratings	9.01 Ratings
Threat Intelligence Reporting	00 Ratings	9.01 Ratings
Automated Threat Identification	00 Ratings	9.01 Ratings

Vulnerability Management Tools

Comparison of Vulnerability Management Tools features of Product A and Product B
	AWS CloudTrail - Ratings	Tenable Attack Surface Management 9.4 1 Ratings 15% above category average
IT Asset Realization	00 Ratings	10.01 Ratings
Authentication	00 Ratings	9.01 Ratings
Configuration Monitoring	00 Ratings	9.01 Ratings
Web Scanning	00 Ratings	9.01 Ratings
Vulnerability Intelligence	00 Ratings	10.01 Ratings

Best Alternatives
	AWS CloudTrail	Tenable Attack Surface Management
Small Businesses	Acronis Cyber Protect Cloud Score 8.2 out of 10	ThreatDown, powered by Malwarebytes Score 7.8 out of 10
Medium-sized Companies	Druva Data Resiliency Cloud Score 9.7 out of 10	CrowdStrike Falcon Score 9.1 out of 10
Enterprises	Druva Data Resiliency Cloud Score 9.7 out of 10	CrowdStrike Falcon Score 9.1 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	AWS CloudTrail	Tenable Attack Surface Management
Likelihood to Recommend	8.0 (4 ratings)	10.0 (1 ratings)
Support Rating	- (0 ratings)	10.0 (1 ratings)

User Testimonials
	AWS CloudTrail	Tenable Attack Surface Management
Likelihood to Recommend	Amazon AWS It is necessary to enable [AWS] Cloudtrail when using AWS in a production environment, otherwise you will not have any idea what is happening within your accounts. Third party monitoring applications will all require [AWS] CloudTrail to be enabled as well. I would not recommend it solely as a monitoring tool, to get the most out of it you must send the logs elsewhere. Either to Cloudwatch logs or a third party product. Incentivized Verified User Anonymous Read full review	Tenable Tenable Attack Surface Management simplifies not just your vulnerability management needs but also the mapping and discovery of known and unknown internet assets. All this within a very intuitive online dashboard, making it relatively easy to setup and configure. Without having to spend hours of training time in order to use basic functions. Incentivized Stephan van der Merwe Cyber Security Analyst Read full review
Pros	Amazon AWS API Log User activity tracking Real-time alerts Incentivized AS Anton Smyslov Product Owner Read full review	Tenable Maps external facing infrastructure and continuously updates this data Can display the scan results in Business Context to help with management reporting Great Asset Management tool Powerful vulnerability scanning engine Incentivized Stephan van der Merwe Cyber Security Analyst Read full review
Cons	Amazon AWS [In my experience] Cost can easily get out of control with multiple trails on full logging Logs can be difficult to decipher Incentivized Verified User Anonymous Read full review	Tenable No improvement can be suggested at this moment as it fits our needs and more Incentivized Stephan van der Merwe Cyber Security Analyst Read full review
Support Rating	Amazon AWS No answers on this topic	Tenable Very fast and helpful support staff. From the Vendor as well as the local Distributor. Support like that makes adding such a product to our MSSP offering the obvious choice. Incentivized Stephan van der Merwe Cyber Security Analyst Read full review
Alternatives Considered	Amazon AWS I think in the end, CloudTrail has more features and you can dive deeper inside the logs so it depends on your usage and what you expect in the end to make the right choice, I would say that both tools are really useful and bring a lot of benefits to I.T. companies. Incentivized Verified User Anonymous Read full review	Tenable We didn't test any other solutions. Because to be frank no other solution can compare feature-wise as well as ease of use. Which makes reselling and supporting any Tenable product such an obvious choice for us. Incentivized Stephan van der Merwe Cyber Security Analyst Read full review
Return on Investment	Amazon AWS Allows us to investigate any strange api actions Increases security Audit trail of changes made in AWS Incentivized Verified User Anonymous Read full review	Tenable This solution is most definitely a great Return on Investment because it can quickly and accurately discover and report on our clients' entire Internet facing real estate. And keep this data updated with any changes. Incentivized Stephan van der Merwe Cyber Security Analyst Read full review
ScreenShots	AWS CloudTrail Screenshots