Hashcat vs. Tanium vs. Titania Nipper

Any time you want to perform offline password cracking exercises, Hashcat is going to be able to do that for you. I can't think of any scenario where you have a password hash you need to crack where another tool would be more suited to the task. Hashcat, of course, works best when you have a GPU available, but you can even use it on a VM if you use the --force flag.

Incentivized

Tanium is well suited for organizations where enterprise infrastructure has great significance and needs to be properly managed as well as protected. Most organizations depend upon their infrastructure to sustain so Tanium can be a boon for them to sustain in this competitive market. However, Tanium is less appropriate for the traditional offices that don't have or have a less online presence.

Incentivized

The tool Titania Nipper is used as a way to improve compliance and risk management, reduce time to market and also provide our customers the needed insight about the possible threats to their network and firewalls. The tool itself we use in conjunction with others, so I can't recommend using only Nipper if a more wide view is needed in terms of vulnerability assessment.

Incentivized

• GPU accelerated password cracking
• Rule based attacks
• Supports all the hash formats

Incentivized

• It's recognize threat and offering easily.
• Helps in security management and installing patches.
• Tanium offers endpoint data precisely, merges many teams and processes effectively.
• It's protect from all kinds of malicious threat and help you to achieve your task.

Incentivized

• Updated database of configuration issues
• Particularly good at Cisco equipment
• Quick overview of issues and conclusions

Incentivized

• When drivers for your GPU aren't working it can be very frustrating to get started
• Some 3rd party GUI exists for Hashcat, but having an official one could be nice

Incentivized

• One issue is its ring topology, as the data is stored in central hubs and pushed through its peer nodes. If the central hub fails, then the associated node will also result in failure.
• Another problem is that all Tanium management is on premises requiring the customer to maintain it. If we want ask any help from Tanium support we always get a response like "you are maintaining it yourselves and it's your responsibility.
• The Tanium User Interface could be improved a bit as, although the tool is rich in performance, a more impressive UI might really attract new customers.

Incentivized

• Reports
• Support most recent version of the firewalls
• Reduce false positives
• More intuitive dashboard
• Multiple language [support]
• Wizard for configuring the interfaces
• Support really PCI reports

Tanium is always my first choice, so much excellent feedback online from genuine users, easy to use in any system environment, and value for money, so many good things about Tanium stacks up against all the other competitors in the market. Tanium is one of the most reliable and trusted risk and compliance management software.

Incentivized

Although Nipper from Titania helps in auditing accurately every device in the network and helps in prioritizing the fixies, it is really useful for the part of the firewall in a network and also for the quick making of reports which are also customizable. But from our experience, the Qualys solution for scanning the networks, although is more costly, it also has more features and options in regards to assessing a network and the elements connected to the network, though it is also somehow less powerful when it comes to creating quick reports. Qualys has a more interface and dashboard approach regarding the results of the scans.

Incentivized

• Hashcat is a free tool
• It can be used to test password policies
• Great tool for penetration testers doing offline password attacks

Incentivized

• Enhanced security.
• Increase in customer trust.
• Overall increase in company revenue.

Incentivized

• We seldom audit the same equipment twice, hence the fixed amount of annual hosts is not very flexible in terms of licensing for our use-case

Incentivized