Digital Shadows vs. Tenable Vulnerability Management

DS is fantastic for big and large-medium companies, it has many very featured functions and works very well. It's a little bit expensive for small and little-medium companies.

Incentivized

I've been using this product since it began as an open source product, I really like it and for the money, I think it's probably the best choice for most companies who need a product like this. Over the years I've seen the interface change quite a bit and sometimes I think it's a bit unclear how to do certain things and the different packages can be confusing, these are the only reasons I'm giving it a 9 instead of a 10.

Incentivized

• We found company emails used for personal uses.
• We found internal documents in deep web.
• We found news and information about the company managers on social media not delivered by the company.

Incentivized

• Setup of the internal scanner was fairly simple and straight forward.
• An update came out for the internal scanner that allows you to add an Internal Certificate Authority for lookup.
• Has automated reporting to keep executives and compliance departments informed.
• Internal scanner can be configured to auto-update itself.
• "Recast Rules" allows your organization to redefine a vulnerabilities' classification, if it is not applicable or your disagree.
• External PCI scans allow you to remediate before submitting to Tenable.io for review.
• Tenable.io staff was very patient and helpful. They provided some limited guidance with remediation.
• Internal and External scans can be automated. schedule for the automated scans is very granular.

Incentivized

• I'd like to have still more features for searching on social media.
• I'd like to have a better interface for configuration.
• It's expensive for middle and small companies, I'd like to have a reduced-features version for them.

Incentivized

• Expensive - You do pay a slight premium for the best product in the space.
• Asset management is difficult to work with if you have a lot of asset turnover, the license can be ''held'' for 3-6 months after the asset is gone from your environment.

Incentivized

Solved the problems of my customers and permitted to clearly demonstrate these problems to management.

Incentivized

We like to renew tenable each year we have had it so far.

Incentivized

It's very easy to use, also non-technical users can understand the information to use for search and results, initial configuration is less easy to configure but just a little.

Incentivized

Overall it is good, it took a little while to understand it and figure things out but once you have a good grasp on it then, it is very good.

Incentivized

They are very available and competent, in addition, they used people with a good knowledge of the Italian language that helped very much, especially with the first customer.

Incentivized

Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)

Incentivized

As I said: ease of use, scanningg of deep web and social media, results easy to understand and use.

Incentivized

The other product didn't have searches on Social Media.

Incentivized

Tenable.io has a comparable set of features, with excellent support and a competitive price. After less than desirable experiences with another company, we moved to Tenable and haven't looked back since.

Incentivized

• DS gave more visibility on the company cyber exposure.
• Results of DS searches helped to solve security holes in people's behaviour.
• Company management reached more awareness about company cyber exposure.

Incentivized

• Since this is a requirement for our PCI compliance and the cost is relatively low, the ROI isn't really something we need to think too much about, Tenable's pricing is fair and affordable.

Incentivized