AWS Config vs. Tenable Nessus

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
AWS Config
Score 7.2 out of 10
N/A
Amazon Web Services offers AWS Config, a service that provides monitoring and assessment of AWS resource configurations to support compliance auditing, change management and troubleshooting, with resource histories and comparison of historical configurations against planned configurations.N/A
Tenable Nessus
Score 8.3 out of 10
N/A
Tenable headquartered in Columbia offers Nessus, a vulnerability scanning and security assessment solution used to analyze an entity's security posture, vulnerability testing, and provide configuration assessments.
$2,790
Pricing
AWS ConfigTenable Nessus
Editions & Modules
No answers on this topic
1 Year
$2,790.00
1 Year + Advanced Support
$3,190.00
2 Years
$5,440.00
2 Years + Advanced Support
$6,240.00
3 Years
$7,951.00
3 Years + Advanced Support
$9,151.00
Offerings
Pricing Offerings
AWS ConfigTenable Nessus
Free Trial
NoNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
YesNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional DetailsWith AWS Config, you are charged based on the number of configuration items recorded, the number of active AWS Config rule evaluations and the number of conformance pack evaluations in your account. A configuration item is a record of the configuration state of a resource in your AWS account. An AWS Config rule evaluation is a compliance state evaluation of a resource by an AWS Config rule in your AWS account, and a conformance pack evaluation is the evaluation of a resource by an AWS Config rule within the conformance pack.—
More Pricing Information
Features
AWS ConfigTenable Nessus
Threat Intelligence
Comparison of Threat Intelligence features of Product A and Product B
AWS Config
-
Ratings
Tenable Nessus
5.1
1 Ratings
47% below category average
Network Analytics00 Ratings8.21 Ratings
Threat Recognition00 Ratings4.51 Ratings
Vulnerability Classification00 Ratings8.21 Ratings
Automated Alerts and Reporting00 Ratings1.01 Ratings
Threat Analysis00 Ratings5.51 Ratings
Threat Intelligence Reporting00 Ratings7.31 Ratings
Automated Threat Identification00 Ratings1.01 Ratings
Vulnerability Management Tools
Comparison of Vulnerability Management Tools features of Product A and Product B
AWS Config
-
Ratings
Tenable Nessus
8.0
1 Ratings
6% below category average
IT Asset Realization00 Ratings9.11 Ratings
Authentication00 Ratings9.11 Ratings
Configuration Monitoring00 Ratings9.11 Ratings
Web Scanning00 Ratings4.51 Ratings
Vulnerability Intelligence00 Ratings8.21 Ratings
Best Alternatives
AWS ConfigTenable Nessus
Small Businesses
HashiCorp Vagrant
HashiCorp Vagrant
Score 9.9 out of 10
ThreatDown, powered by Malwarebytes
ThreatDown, powered by Malwarebytes
Score 8.8 out of 10
Medium-sized Companies
Ansible
Ansible
Score 8.9 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
Enterprises
Ansible
Ansible
Score 8.9 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
AWS ConfigTenable Nessus
Likelihood to Recommend
8.8
(6 ratings)
8.5
(7 ratings)
Likelihood to Renew
-
(0 ratings)
9.1
(1 ratings)
Usability
-
(0 ratings)
9.7
(2 ratings)
Performance
9.6
(2 ratings)
-
(0 ratings)
Support Rating
-
(0 ratings)
7.1
(4 ratings)
Ease of integration
6.2
(2 ratings)
-
(0 ratings)
User Testimonials
AWS ConfigTenable Nessus
Likelihood to Recommend
Amazon AWS
It's really good if your infrastructure services is all in AWS, that means everything could be audited and monitored using AWS config. You also can create alarms to notify you or your team about any changes on your AWS resources which is very useful to prevent abuse if you have a fairly large team. It's also very useful whenever some third party wants to audit your AWS resources, if you have a fairly comprehensive AWS config configured, the auditing process will be easy since they only need to look at your AWS config setup.
Read full review
Tenable
Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.
Read full review
Pros
Amazon AWS
  • The ability to track changes in AWS is paramount, AWS config allows you to do this
  • Allows the auditing of an AWS account
  • Can view history of an account that has AWS config enabled
Read full review
Tenable
  • With Nessus we can find the missing critical patches for a server or workstations.
  • Nessus points out any vulnerable or outdated software Technologies used in the system, thus eliminating any chances for security flaws being turned up.
  • Nessus typically points any configuration level issues in accordance with the OWASP guidelines. Even the configuration of SSL related which are most of the time handled by some vendors or 3rd parties.
  • Nessus not only lists out these Vulnerabilities but describes clearly the vulnerabilities in details with its thousands of plugins updated regularly, the tool also recommends solution with practical details of easy implementation.
Read full review
Cons
Amazon AWS
  • It's only AWS, no third party.
  • Not the most intuitive interface, but with a little getting used to it is OK.
Read full review
Tenable
  • Could use an upgrade within reports.
  • Scans can take a long time to complete. Have to break them down in small sections.
Read full review
Likelihood to Renew
Amazon AWS
No answers on this topic
Tenable
Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.
Read full review
Usability
Amazon AWS
No answers on this topic
Tenable
It's very much a plug and play application that the user can go into with limited knowledge and set-up scans in minutes.
Read full review
Performance
Amazon AWS
Would rate lower for other workloads but for AWS workloads its simple to set up, cost effective and customisable. Primary use case is compliance from a governance perspective.
Read full review
Tenable
No answers on this topic
Support Rating
Amazon AWS
No answers on this topic
Tenable
I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.
Read full review
Alternatives Considered
Amazon AWS
I do not know or have used any other product in AWS cloud space that matches what AWS Config provides. We have some custom built monitoring and governance, however that is there because AWS Config does not provide it currently.
Read full review
Tenable
Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with Metasploit in order to show to the IT managers the importance of the software/hardware hardening.
Read full review
Return on Investment
Amazon AWS
  • Enforcing audit requirements
  • Easy to set up alerting when there are rule breaches
  • Auto remediation reduces the manual policing of such breaches
Read full review
Tenable
  • Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners.
  • The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan.
  • Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews.
Read full review
ScreenShots