Tenable.io

I've been using this product since it began as an open source product, I really like it and for the money, I think it's probably the best choice for most companies who need a product like this. Over the years I've seen the interface change quite a bit and sometimes I think it's a bit unclear how to do certain things and the different packages can be confusing, these are the only reasons I'm giving it a 9 instead of a 10.

Tenable.io is a useful tool to use in any scenario where you are looking to increase your visibility of security vulnerabilities in the organization. It supports a large number of use cases for vulnerability management and would only not really be very appropriate for anything that is not supported by the solution (not yet encountered in our organization).

The software is well suited for Information Technology departments that need a way to constantly check their servers and equipment for any and all vulnerabilities. This would be of huge importance to larger organizations with large networks and multiple servers. The software might be less suitable for a smaller organization with a more localized network or need, but that isn't necessarily a guarantee. I think it's appropriate for any Information Technology departments.

Tenable.io works in almost any scenario imaginable. It can scan your cloud environments with pre-configured AWS/Azure scanners. It can give you an external view of your infrastructure, or scan internally. There are also agents you can deploy for assets on a network you don't have access to scan over. I imagine that per asset licensing would be prohibitive for extremely large environments when you could do a Nessus Professional or Security Center deployment instead, but I haven't researched those options much since we're at 800 assets total.

Excellent for standard vulnerability scanning, especially for AWS and with the web and PCI scanning, it provides a complete package.

Tenable.io is a cost effective Internal and External scanner. The Internal scanner came with a .ova, so it was very simple and quick to deploy it into our ESXi environment. It has a cloud-based dashboard for management and the internal scanner is configured to auto-update from Tenable.io. The license came with 4 External PCI scans (with remediation) a year.