ManageEngine Vulnerability Manager Plus vs. Skybox Security

ManageEngine Vulnerability Manager Plus is highly effective for organizations prioritizing ease of use, cost-effectiveness, and a single pane of glass for both vulnerability detection and patching. It is well-suited for organizations needing to manage a diverse, yet traditional, on-premise IT infrastructure (servers, workstations, laptops). It is good at securing remote endpoints by using an agent to scan, detect and patch workstations. It is good for both scanning and remediating vulnerabilities through the built-in patching tools. It is ideal for a smaller to mid sized environment using Active Directory.

Incentivized

For any customer that has a complex network environment spanning globally, skybox helps manage firewall policy compliance for many vendors quite easy. It has a variety of security and network vendors that it is compatible with in its database.

• Patch detection
• Patch application
• History and inventory.

• Skybox manages compliance for firewalls better than we have seen with other tools.
• Skybox integrates into standard change management tools so change control can flow through Skybox and assist with all decisions to implement a change.
• The Skybox network map is more detailed than other management tools showing us paths other tools didn't find.

Incentivized

• Better integration with third-party tools.
• Licenses for budget-friendly customers

Incentivized

• User experience. On the first approach, it's not the simplest tool that I have ever used.
• Web-based console. In my honest opinion it's very important [to have] this type of functionality to extend the use of Skybox.
• Too many updates of the product.

Incentivized

We're already on our third renewal.

Its usable for system patchig

Incentivized

It is user friendly and quite easy to use. It centralizes all info in one portal and generates good reports to help you visualize and assess your change management decision

The support team needs to be improved especially in their response and awareness about recent bugs in their solution. For example, sometimes they are not aware about how to integrate specific vendors like Microsoft Azure and they still don't have answers to it until now.

I chose Vulnerability because it is very easy to use and analyzes threats effectively. I previously used Microsoft System Center; however, due to its complexity and lack of transparency, we decided to remove it from our company and keep only Vulnerability.

Incentivized

CloudGuard Dome9 does not have a suite for an on-premise datacenter.

Incentivized

• By automating the scanning, assessment, and patch management process, VMP has helped reduce the time to patch for us by 40%.
• It has provided continuous visibility into device health and overall patch state. This has helped reduce the amount of time manually checking and updating.
• By prioritizing the list of vulnerabilities the tool has helped our staff stay focused on the high-impact risks and ensure that critical assets are patched first.

Incentivized

• Skybox is in pilot
• Positive ROI is in change management

Incentivized