TrustRadius: an HG Insights company

Microsoft Defender for Cloud Apps vs. Tenable Vulnerability Management

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Microsoft Defender for Cloud Apps

    Score7.8 out of 10
    N/AMicrosoft Defender for Cloud Apps (formerly Microsoft Cloud App Security) is a multimode cloud access security broker.N/A

    Tenable Vulnerability Management

    Score8.9 out of 10
    N/AVulnerability management specialist Tenable offers their cloud application and container security platform Tenable Web App Scanning (formerly Tenable.io), a vulnerability management tool that emphasizes visibility of web applications, automatic scanning, and a unified view of cloud infrastructure and possible inconsistencies indicating a vulnerability.N/A
    Pricing
    Microsoft Defender for Cloud AppsTenable Vulnerability Management
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Microsoft Defender for Cloud AppsTenable Vulnerability Management
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Microsoft Defender for Cloud AppsTenable Vulnerability Management
    Considered Both Products
    Microsoft
    Chose Microsoft Defender for Cloud Apps
    Many of the competitors who started in the CASB space have expanded into the SASE category. If organizations do not need the additional controls provided by a SASE solution, then Defender for Cloud Apps is pretty good. If an organization needs a true SASE solution, you would be …
    Incentivized
    Tenable
    No answer on this topic
    Key User Insights
    Would buy again
    92%
    Would buy again
    11 Answers
    100%
    Would buy again
    5 Answers
    Delivers good value for the price
    100%
    Delivers good value for the price
    12 Answers
    100%
    Delivers good value for the price
    5 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    12 Answers
    100%
    Happy with the feature set
    5 Answers
    Lived up to sales and marketing promises
    91%
    Lived up to sales and marketing promises
    10 Answers
    No answers on this topic
    Implementation went as expected
    91%
    Implementation went as expected
    10 Answers
    No answers on this topic
    Features
    Microsoft Defender for Cloud AppsTenable Vulnerability Management
    Threat Intelligence
    Comparison of Threat Intelligence features of Microsoft Defender for Cloud Apps and Tenable Vulnerability Management
    Feature
    Microsoft Defender for Cloud Apps
    -
    Ratings
    Tenable Vulnerability Management
    8.4
    2 Ratings
    4% above category average
    Network Analytics00 Ratings10.02 Ratings
    Threat Recognition00 Ratings10.02 Ratings
    Vulnerability Classification00 Ratings10.02 Ratings
    Automated Alerts and Reporting00 Ratings4.02 Ratings
    Threat Analysis00 Ratings10.02 Ratings
    Threat Intelligence Reporting00 Ratings5.02 Ratings
    Automated Threat Identification00 Ratings10.02 Ratings
    Vulnerability Management Tools
    Comparison of Vulnerability Management Tools features of Microsoft Defender for Cloud Apps and Tenable Vulnerability Management
    Feature
    Microsoft Defender for Cloud Apps
    -
    Ratings
    Tenable Vulnerability Management
    8.8
    2 Ratings
    6% above category average
    IT Asset Realization00 Ratings8.02 Ratings
    Authentication00 Ratings10.02 Ratings
    Configuration Monitoring00 Ratings8.02 Ratings
    Web Scanning00 Ratings8.02 Ratings
    Vulnerability Intelligence00 Ratings10.02 Ratings
    Best Alternatives
    Microsoft Defender for Cloud AppsTenable Vulnerability Management
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    No answers on this topic
    Tenable Nessus
    Score8.8 out of 10
    Enterprises
    No answers on this topic
    Tenable Nessus
    Score8.8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Microsoft Defender for Cloud AppsTenable Vulnerability Management
    Likelihood to Recommend
    8.1
    (12 ratings)
    10.0
    (7 ratings)
    Likelihood to Renew
    -
    (0 ratings)
    9.0
    (1 ratings)
    Usability
    8.8
    (2 ratings)
    8.0
    (1 ratings)
    Support Rating
    5.0
    (1 ratings)
    8.8
    (2 ratings)
    User Testimonials
    Microsoft Defender for Cloud AppsTenable Vulnerability Management
    Likelihood to Recommend
    Microsoft
    Microsoft Defender for Cloud Apps is well suited when working with other Microsoft Applications. For example, if you are working with Microsoft Office 365 it works very well when implementing CASB features. It works when implementing monitoring or blocks on Sanctioned applications however customizing the message to users is not that great.
    Incentivized
    Read full review
    Tenable
    I've been using this product since it began as an open source product, I really like it and for the money, I think it's probably the best choice for most companies who need a product like this. Over the years I've seen the interface change quite a bit and sometimes I think it's a bit unclear how to do certain things and the different packages can be confusing, these are the only reasons I'm giving it a 9 instead of a 10.
    Incentivized
    Read full review
    Pros
    Microsoft
    • The integration to Microsoft Entra ID is seamless, which allows Conditional Access to redirect the session to Microsoft Defender for Cloud App for it to take actions (Block or Monitor).
    • Tracker users' activity is very good when troubleshooting or running an investigate.
    • Detecting risky users through tight integration with Microsoft Entra ID is a very good feature.
    • Detecting mass downloads and blocking the download of files from non-manage company devices is a very good feature as well.
    Incentivized
    Read full review
    Tenable
    • Setup of the internal scanner was fairly simple and straight forward.
    • An update came out for the internal scanner that allows you to add an Internal Certificate Authority for lookup.
    • Has automated reporting to keep executives and compliance departments informed.
    • Internal scanner can be configured to auto-update itself.
    • "Recast Rules" allows your organization to redefine a vulnerabilities' classification, if it is not applicable or your disagree.
    • External PCI scans allow you to remediate before submitting to Tenable.io for review.
    • Tenable.io staff was very patient and helpful. They provided some limited guidance with remediation.
    • Internal and External scans can be automated. schedule for the automated scans is very granular.
    Incentivized
    Read full review
    Cons
    Microsoft
    • It takes some time to scan and apply the policies when there is some sensitive information.
    • After it applies the policies, it works, but there is a delay.
    • It doesn't provide any way to scan Microsoft Teams when an external exchange of images is happening. You can always do the filtering on the documents during the chat, but if there is an image, then some kind of OCR capability is required to detect it. At present, there is no way [Microsoft Cloud App Security] can go and detect those kinds of images and alert us
    Incentivized
    Read full review
    Tenable
    • Expensive - You do pay a slight premium for the best product in the space.
    • Asset management is difficult to work with if you have a lot of asset turnover, the license can be ''held'' for 3-6 months after the asset is gone from your environment.
    Incentivized
    Read full review
    Likelihood to Renew
    Microsoft
    No answers on this topic
    Tenable
    We like to renew tenable each year we have had it so far.
    Incentivized
    Read full review
    Usability
    Microsoft
    The interface is pretty simple and easy to use; however, you will need to do a lot of investigative research on your own to get comfortable with it. Originally, many of the Microsoft security tools had their own seperate consoles. Overtime, they have blended into one interface which is the ideal state. In some cases it is clear Microsoft had to pick which console a certain feature or setting was going to reside in and this leads to some confusion. For example, DLP is managed through Defender for Cloud Apps but you will also need to jump into Purview. For things like reverse proxy on your M365 tenant, you will need to go into Azure and setup conditional access rules. Not a big problem and I can understand why the settings are located where they are but for someone just starting out with Defender for Cloud Apps, it will take some time to figure out.
    Incentivized
    Read full review
    Tenable
    Overall it is good, it took a little while to understand it and figure things out but once you have a good grasp on it then, it is very good.
    Incentivized
    Read full review
    Support Rating
    Microsoft
    I have not utilized actual support but the Sales and Product teams have been super helpful in moving our implementation forward and showing us the best practices.
    Incentivized
    Read full review
    Tenable
    Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)
    Incentivized
    Read full review
    Alternatives Considered
    Microsoft
    More flexible and more features with easy integration with cloud services like Microsoft Azure and other cloud services. Overall both gives similar features but we prefer Microsoft cloud app security due to its high threat detection rate. mostly we have been able to stop the threat in very very less time.
    Incentivized
    Read full review
    Tenable
    Tenable.io has a comparable set of features, with excellent support and a competitive price. After less than desirable experiences with another company, we moved to Tenable and haven't looked back since.
    Incentivized
    Read full review
    Return on Investment
    Microsoft
    • Cloud App Security saves us thousands of dollars finding and rectifying apps security issues
    • Identity Security Posture helps the organization identity stay in shape, saving thousands of dollars on security consultations
    • The cost of suffering a breach cannot be quantified, CAS helps minimize the chances of the attackers succeeding, with excellent historical logging for most operations
    Incentivized
    Read full review
    Tenable
    • Since this is a requirement for our PCI compliance and the cost is relatively low, the ROI isn't really something we need to think too much about, Tenable's pricing is fair and affordable.
    Incentivized
    Read full review
    ScreenShots