Kali Linux vs. Tenable Nessus

Kali is well suited for the following:

• Analyzing SSL certs to verify
  they are installed correctly
• Analyzing SSL configuration on
  servers to confirm correct ciphers are enabled
• Scanning our web servers for
  vulnerabilities as part of our regular security testing
• Scanning wordpress sites to
  identify out of date plugins and other potential security issues.
• Running port scans on our servers
  to make sure only certain ports are open

It is not appropriate for users who aren't already familiar with cybersecurity. Kali is an advanced OS geared for cybersecurity applications.

Incentivized

Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.

Incentivized

• Open source
• Suite of tools for PT
• NEtHunter

Incentivized

• Shows you how to fix certain vulnerabilities and the commands to run.
• Gives you the CVEs that the vulnerabilities are matched to.
• Easy to understand the vulnerabilities list, giving reasons why the issues need to be patched or fixed.

• Usage wise, it is tough for use by beginners. Can be improved.
• With Kali Linux have noticed driver related issues especially with Nvidia graphics cards.
• Kali Linux can be improved for use as a day to day OS.

Incentivized

• Could use an upgrade within reports.
• Scans can take a long time to complete. Have to break them down in small sections.

Incentivized

Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.

Incentivized

Tenable Nessus is a great product and provides a lot of value, but it is difficult to set up and use and the amount of data it generates can be overwhelming. It does help us prioritize based on the severity of the detection, however there are sometimes mitigating factors that we have implemented that Nessus does not account for, which causes lots of noise in the reports.

Incentivized

I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.

Incentivized

As Parrot security OS is relatively new to the game, Kali Linux has an edge as it is in the market since 2013. Kali Linux has an advantage that it is opensource and has good back end technical support by open source developers worldwide. Also Parrot security OS is based on cloud environments and Kali Linux OS is made to run in house.

Incentivized

Ease of deployment and use even for junior analysts, strong plugin support, and up-to-date CVE coverage, cost-effective licensing, especially for mid-size companies, and seamless integration with the SIEM tool. Overall, Nessus hit the right balance between functionality, performance, and total cost of ownership for our needs and usability.

• Kali is a free OS which makes it very useful to install so many tools while not paying a premium

Incentivized

• It has helped identify security flaws in our infrastructure that has helped better secure our client's data. It did so quickly and efficiently so I was able to move on to other tasks.

Incentivized