An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!
Enjoy!
It is a requirement for all of the military projects I’ve worked on. Specifically ACAS which has Nessus as a component.
For a solo person doing scans for clients I think the cost is like $2k. Seems fine but I wouldn’t buy it without a guarantee I’d get my money out of it.
There is one other product I’ve tried from greenbone. Never used it professionally. Idk if I would trust it at the same level as Nessus.
Good info, thanks.
I am familiar with ACAS, which is why I am testing the products.
Fully capturing all the capabilities of scanning, auditing configuration seems like you could put countless hours into the implementation.
I imagine the ROI is high based on what I've seen.
Would you agree?
@redfox I've used Tenable for a LONG time. Pretty much their entire suite of products. Cost in the enterprise is going to vary on how many endpoints you have and what solutions you need.
As for effectiveness. I think it it has been and continues to be VM/scanning best of breed. Security Center specifically is highly extensible. It should be easy enough to get started with though may take some time to build out more advanced things.
Alts include Qualys and Rapid7.
Paging @tecnobabble
Thanks
I’ve used Tenable Nessus Professional, and Tenable Security Center and both work well in their categories. Nessus Professional is a portable Nessus scanner a security person can take with them to do adhoc scans. Security Center (aka Tenable.sc) is a vulnerability management solution for an enterprise.
Their competition is Rapid7 and Qualys, but I can’t speak to those myself.
Makes sense. Thanks. I have heard of R7. Had not heard of Qualys.