We changed our name from IT Central Station: Here's why

IBM Guardium Vulnerability Assessment vs Tenable Nessus comparison

Cancel
You must select at least 2 products to compare!
Featured Review
Find out what your peers are saying about Tenable Network Security, Rapid7, Morphisec and others in Vulnerability Management. Updated: January 2022.
564,599 professionals have used our research since 2012.
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The most valuable feature is that it provides a simple English recommendation on actions that you need to take once a vulnerability is discovered."

More IBM Guardium Vulnerability Assessment Pros →

"The trial version is very good for testing whether it will suit your needs.""The automatic scanner and scheduler are pretty cool.""The features of Tenable Nessus that I have found most valuable are its reliability and its ability to collate a dependable output, where we are able to get the same vulnerability when we test manually. The output is quite reliable.""Out of the box, the product works well for us, so it's not a tool that we need to customize very much.""The solution is the most dynamic one I have seen thus far.""We have done code scanning for a long period because as a company, we do DevOps as part of our development life cycle.""Overall Zoom is a good solution.""The reports are pretty nice and easy to understand."

More Tenable Nessus Pros →

Cons
"The interface could be improved by having sub-groups of tests, ultimately making the process of collecting tests faster."

More IBM Guardium Vulnerability Assessment Cons →

"The professional version is not very scalable.""Scans aren't done properly and some devices aren't pinged.""In terms of what could be improved, I would say its reporting portion.""It wasn't very clear how the scripts are running the scans. There's information about the script but it's not straightforward. The script information for each of the plugins should be available, but it doesn't give us straightforward direct information about how it was executed. That needs to be more clear.""We'd like to see more integration potential within the solution.""We would like to have the option of using the solution for the cloud as well as on-premises with the same license at the same time. That would be very helpful.""The price could be more reasonable. I used the free Nessus version in my lab with which you can only scan 16 IP addresses. If I wanted to put it in the lab in my network at work, and I'm doing a test project that has over 30 nodes in it, I can't use the free version of Nessus to scan it because there are only 16 IP addresses. I can't get an accurate scan. The biggest thing with all the cybersecurity tools out there nowadays, especially in 2020, is that there's a rush to get a lot of skilled cybersecurity analysts out there. Some of these companies need to realize that a lot of us are working from home and doing proof of concepts, and some of them don't even offer trials, or you get a trial and it is only 16 IP addresses. I can't really do anything with it past 16. I'm either guessing or I'm doing double work to do my scans. Let's say there was a license for 50 users or 50 IP addresses. I would spend about 200 bucks for that license to accomplish my job. This is the biggest complaint I have as of right now with all cybersecurity tools, including Rapid7, out there, especially if I'm in a company that is trying to build its cybersecurity program. How am I going to tell my boss, who has no real budget of what he needs to build his cybersecurity program, to go spend over $100,000 for a tool he has never seen, whereas, it would pack the punch if I could say, "Let me spend 200 bucks for a 50 user IP address license of this product, do a proof of concept to scan 50 nodes, and provide the reason for why we need it." I've been a director, and now I'm an ISO. When I was a director, I had a budget for an IT department, so I know how budgets work. As an ISO, the only thing that's missing from my C-level is I don't have to deal with employees and budgets, but I have everything else. It's hard for me to build the program and say, "Hey, I need these tools." If I can't get a trial, I would scratch that off the list and find something else. I'm trying to set up Tenable.io to do external PCI scans. The documentation says to put in your IP addresses or your external IP addresses. However, if the IP address is not routable, then it says that you have to use an internal agent to scan. This means that you set up a Nessus agent internally and scan, which makes sense. However, it doesn't work because when you use the plugin and tell it that it is a PCI external, it says, "You cannot use an internal agent to scan external." The documentation needs to be a little bit more clear about that. It needs to say if you're using the PCI external plugin, all IP addresses must be external and routable. It should tell the person who's setting it up, "Wait a minute. If you have an MPLS network and you're in a multi-tenant environment and the people who hold the network schema only provide you with the IP addresses just for your tenant, then you are not going to know what the actual true IP address that Tenable needs to do a PCI scan." I've been working on Tenable.io to set up PCI scans for the last ten days. I have been going back and forth to the network thinking I need this or that only to find out that I'm teaching their team, "Hey, you know what, guys? I need you to look past your MPLS network. I need you to go to the edge's edge. Here's who you need to ask to give me the whitelist to allow here." I had the blurb that says the plugin for external PCI must be reachable, and you cannot use an internal agent. I could have cut a few days because I thought I had it, but then when I ran it, it said that you can't run it this way. I wasted a few hours in a day. In terms of new features, it doesn't require new features. It is a tool that has been out there for years. It is used in the cybersecurity community. It has got the CV database in it, and there are other plugins that you could pass through. It has got APIs you can attach to it. They can just improve the database and continue adding to the database and the plugins to make sure those don't have false positives. If you're a restaurant and you focus on fried chicken, you have no business doing hamburgers.""Model OS costs (and its segregation schema for individual modules)."

More Tenable Nessus Cons →

Pricing and Cost Advice
Information Not Available
  • "Nowadays, your vulnerability applications are going to be kind of pricey because lots of them, including Rapid7, are based upon a base price, but then they add in the nodes. That's where they get you. If you're a big network, obviously, you need to scan everything. Therefore, it's going to be costly. The risk and insurance money associated with having ransomware on my networks is going to cost me more money, time, and marketing than the price of the tool. That's why I'm speaking only as an information security officer to security operations. This is the tool that is there in my toolbox to say whether we vulnerable or not. At this point, I don't care about how much it costs my company to have it because if I wasn't able to report it and we got ransomware, then who cares? I'm probably going to be out of business because it happened. That's why I don't care about the price. I have it, and I could use it effectively and do my report. At the end of the day, even if we get ransomware, as long as I reported it, followed my protocol, and put in the change, irrespective of whether it was ignored or denied, I did my job."
  • "We pay approximately $2,500 on a yearly basis."
  • "We have a subscription, the licensing fees are paid yearly, and I am using the latest version."
  • "We incurred a single cost for a perpetual license, although I cannot comment on the price as this is above my management level."
  • "The price is reasonable."
  • "In general, it is extremely expensive."
  • "The price of the solution is reasonable."
  • "One problem with Tenable is its pricing policy. Optimal results can be achieved with Greenbone Solutions which has much more friendly pricing policies."
  • More Tenable Nessus Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
    564,599 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: 
    Guardium could expand the templates beyond CIS/STIG by correlating with other market-templates (PCI, Sox, HIPAA...) and maybe, in the future, put a button that allows you to autofix the problem… more »
    Top Answer: 
    You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. You can easily prioritize vulnerabilities using attacker analytics. Overall, Rapid7… more »
    Top Answer: 
    Tenable Nessus is a vulnerability assessment solution that is both easy to deploy and easy to manage. The design of the program is such that if a company should desire to handle the installation… more »
    Top Answer: 
    The trial version is very good for testing whether it will suit your needs.
    Ranking
    13th
    Views
    576
    Comparisons
    446
    Reviews
    1
    Average Words per Review
    228
    Rating
    8.0
    1st
    Views
    21,292
    Comparisons
    17,007
    Reviews
    23
    Average Words per Review
    467
    Rating
    8.2
    Comparisons
    Learn More
    Overview

    IBM Guardium Vulnerability Assessment scans data infrastructures (databases, data warehouses and big data environments) to detect vulnerabilities, and suggests remedial actions. The solution identifies exposures such as missing patches, weak passwords, unauthorized changes and misconfigured privileges.

    Nessus Professional is the industry’s most widely deployed assessment solution for identifying the vulnerabilities, configuration issues, and malware that attackers use to penetrate your, or your customer's network. With the broadest coverage, the latest intelligence, rapid updates, and an easy-to-use interface, Nessus offers an effective and comprehensive vulnerability scanning package for one low cost.

    Offer
    Learn more about IBM Guardium Vulnerability Assessment
    Learn more about Tenable Nessus
    Sample Customers
    Information Not Available
    Bitbrains, Tesla, Just Eat, Crosskey Banking Solutions, Covenant Health, Youngstown State University
    Top Industries
    VISITORS READING REVIEWS
    Computer Software Company29%
    Comms Service Provider14%
    Financial Services Firm10%
    Insurance Company8%
    REVIEWERS
    Financial Services Firm17%
    Healthcare Company13%
    Security Firm13%
    Manufacturing Company13%
    VISITORS READING REVIEWS
    Computer Software Company25%
    Comms Service Provider21%
    Government10%
    Financial Services Firm6%
    Company Size
    No Data Available
    REVIEWERS
    Small Business38%
    Midsize Enterprise33%
    Large Enterprise29%
    VISITORS READING REVIEWS
    Small Business16%
    Midsize Enterprise24%
    Large Enterprise60%
    Find out what your peers are saying about Tenable Network Security, Rapid7, Morphisec and others in Vulnerability Management. Updated: January 2022.
    564,599 professionals have used our research since 2012.

    IBM Guardium Vulnerability Assessment is ranked 13th in Vulnerability Management with 1 review while Tenable Nessus is ranked 1st in Vulnerability Management with 24 reviews. IBM Guardium Vulnerability Assessment is rated 0.0, while Tenable Nessus is rated 8.2. The top reviewer of IBM Guardium Vulnerability Assessment writes "Performs well and provides clear, concise instructions to repair vulnerabilities that it identifies". On the other hand, the top reviewer of Tenable Nessus writes "Easy to use, good support, and gives full reports of what's vulnerable per device". IBM Guardium Vulnerability Assessment is most compared with Qualys VM, Rapid7 InsightVM, Tenable.io Vulnerability Management, Rapid7 Metasploit and Tripwire IP360, whereas Tenable Nessus is most compared with Rapid7 InsightVM, Qualys VM, Tenable.io Vulnerability Management, Tenable SC and Kenna.VM.

    See our list of best Vulnerability Management vendors.

    We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.