PDQ Deploy & Inventory vs. Tenable Nessus vs. Tripwire IP360

PDQ Inventory is great if you have a local network of computers on or off a domain. As long as you have a way to log into them with common credentials. Great for large organizations, particularly ones interconnected with VPNs. PDQ Inventory isn't so great for PCs that aren't connected to the same LAN the server is on. (i.e. non-vpn remote users) They used to have a remote agent you could install, but it was removed after numerous issues.

Incentivized

Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.

Incentivized

I think Tripwire IP360 is suited for any environment as long as the leadership is willing to support the outcome.

Incentivized

• Deploy updates to software like Adobe and Java
• Show which computers are currently connected and turned on
• Turn on computers that are off
• Turn off computers that are on
• View which hardware (RAM, HDD, processor, etc) is on each device

Incentivized

• Shows you how to fix certain vulnerabilities and the commands to run.
• Gives you the CVEs that the vulnerabilities are matched to.
• Easy to understand the vulnerabilities list, giving reasons why the issues need to be patched or fixed.

• I find the Tripwire IP360 reporting features extraordinary. I can run various audit and inventory reports at any point since the inception of the tool. For example, I can execute a report on the history of an asset, which establishes a baseline and can be used to support many security objectives.
• Scan scheduling. This feature allows the tool to run independently without human intervention. I don’t have time to manually run scans of different departments. Therefore, I schedule all my audits and check the report the next day. This has worked brilliantly for 3 years now.
• Automated update of the vulnerability rules. Automatically updating these rules and binding them to the scans preserves the tool relevancy during audits

Incentivized

• The scripting part could benefit from samples / examples
• Deployment scenarios could be included for ease on first use
• Including Inventory directly within Deploy would be great

Incentivized

• Could use an upgrade within reports.
• Scans can take a long time to complete. Have to break them down in small sections.

Incentivized

• I’d like to see IP360 have the ability to discover additional security appliances such as PaloAlto and Fortinet appliances.

Incentivized

PDQ is very useful and one of the tools that we use a lot.

Incentivized

Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.

Incentivized

The interface is straight forward and guides you through the process there. PDQ keeps track of the when new updates are made available writes the scripts and all l you need to do is push the button. (Mr George Jetson) Now with the download done you just sit back worry free and watch the software install in 1% of the time it would take to take care of the PC manually.

Incentivized

Tenable Nessus is a great product and provides a lot of value, but it is difficult to set up and use and the amount of data it generates can be overwhelming. It does help us prioritize based on the severity of the detection, however there are sometimes mitigating factors that we have implemented that Nessus does not account for, which causes lots of noise in the reports.

Incentivized

I have not had to use PDQ Deploy support's process. In terms of the actual application, I haven't found an exe, msi or script that I can throw at it that it can't handle. Being able to call the config file for Office is an especially useful feature.

Incentivized

I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.

Incentivized

The only other product on the market is Ninite, the major disadvantaged of Ninite you need to build you own packages and scripts for deployment. I would much rather download the packages and manager the software in this fashion then to take all of the time to do it Ninites way. I would need to go find and keep update date in the industry when a vendor updates something... I have not time to do this Please Choice PDQ.

Incentivized

Ease of deployment and use even for junior analysts, strong plugin support, and up-to-date CVE coverage, cost-effective licensing, especially for mid-size companies, and seamless integration with the SIEM tool. Overall, Nessus hit the right balance between functionality, performance, and total cost of ownership for our needs and usability.

I chose Tripwire IP360 because of its flexible reporting features

Incentivized

• Convenience! Despite being a small team, PDQ Deploy has boosted our ability to deliver up-to-date Windows applications to our client PCs in a fraction of the time it took when the process was a manual one. Our reach has naturally improved; installing a simple application on a suite of 20 PCs no longer seems to be a daunting task.
• TIME-SAVING! I cannot emphasize enough the time savings one can enjoy with this product!

Incentivized

• It has helped identify security flaws in our infrastructure that has helped better secure our client's data. It did so quickly and efficiently so I was able to move on to other tasks.

Incentivized

• The biggest impact Tripwire has had in the organization is risk reduction. Since the inception of the tool our vulnerabilities have been reduced by 40%.

Incentivized