Tenable Attack Surface Management (formerly Tenable.asm, and previously Bit Discovery) is an external attack surface management (EASM) solution that integrates into a vulnerability management platform. Tenable.asm continuously maps the entire internet and discovers connections to internet-facing assets so that users can assess the security posture of the entire external attack surface, or those facets of an organization that face the public, and the Internet.
It can be used to access an attack…
N/A
Tenable Nessus
Score 8.4 out of 10
N/A
Tenable headquartered in Columbia offers Nessus, a vulnerability scanning and security assessment solution used to analyze an entity's security posture, vulnerability testing, and provide configuration assessments.
We didn't test any other solutions. Because to be frank no other solution can compare feature-wise as well as ease of use. Which makes reselling and supporting any Tenable product such an obvious choice for us.
Tenable Attack Surface Management simplifies not just your vulnerability management needs but also the mapping and discovery of known and unknown internet assets. All this within a very intuitive online dashboard, making it relatively easy to setup and configure. Without having to spend hours of training time in order to use basic functions.
Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.
With Nessus we can find the missing critical patches for a server or workstations.
Nessus points out any vulnerable or outdated software Technologies used in the system, thus eliminating any chances for security flaws being turned up.
Nessus typically points any configuration level issues in accordance with the OWASP guidelines. Even the configuration of SSL related which are most of the time handled by some vendors or 3rd parties.
Nessus not only lists out these Vulnerabilities but describes clearly the vulnerabilities in details with its thousands of plugins updated regularly, the tool also recommends solution with practical details of easy implementation.
Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.
Very fast and helpful support staff. From the Vendor as well as the local Distributor. Support like that makes adding such a product to our MSSP offering the obvious choice.
I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.
We didn't test any other solutions. Because to be frank no other solution can compare feature-wise as well as ease of use. Which makes reselling and supporting any Tenable product such an obvious choice for us.
Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with Metasploit in order to show to the IT managers the importance of the software/hardware hardening.
This solution is most definitely a great Return on Investment because it can quickly and accurately discover and report on our clients' entire Internet facing real estate. And keep this data updated with any changes.
Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners.
The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan.
Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews.