Try our new research platform with insights from 80,000+ expert users

Cisco Vulnerability Management (formerly Kenna.VM) vs Vulcan Cyber comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Vulnerability Managem...
Ranking in Risk-Based Vulnerability Management
19th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
1
Ranking in other categories
Cisco Security Portfolio (11th)
Vulcan Cyber
Ranking in Risk-Based Vulnerability Management
9th
Average Rating
7.4
Reviews Sentiment
7.1
Number of Reviews
11
Ranking in other categories
Vulnerability Management (25th), Cloud Security Remediation (2nd)
 

Mindshare comparison

As of February 2026, in the Risk-Based Vulnerability Management category, the mindshare of Cisco Vulnerability Management (formerly Kenna.VM) is 2.7%, up from 2.0% compared to the previous year. The mindshare of Vulcan Cyber is 2.5%, up from 2.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Risk-Based Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Vulcan Cyber2.5%
Cisco Vulnerability Management (formerly Kenna.VM)2.7%
Other94.8%
Risk-Based Vulnerability Management
 

Featured Reviews

AshishPaliwal - PeerSpot reviewer
Self-employed at Self-employed
Offers contextual prioritization and risk-based remediation of vulnerability
An improvement would be some sort of an integration with any GRC suite. There are a lot of GRC suites available, like Archer, MetricStream, Rsam, Protiviti, for example. So how would a solution like this work if my company has already invested thousands or maybe millions in a GRC solution? Do I still need it and how does it fit into an existing SAP environment? There could be interoperability, having more data sources, integrating Splunk, Qualys, FireEye, Rapid7, Carbon Black. I'm sure all that can be done to an extent, with a little more insight and a little more accuracy on the industry numbers and trends. I'd like the solution to offer any sort of assistance in any way with the remediation part, not just identification of vulnerability risk, and that is second.
reviewer2649297 - PeerSpot reviewer
Technical Architect at a manufacturing company with 10,001+ employees
Streamlines prioritization but reporting needs enhancement
There are several areas needing improvement. The product helps, but the reporting relies heavily on Power BI. It is limited to graphical views and requires additional filtering, posing operational challenges. The inability to download specific asset details directly from the Power BI portal is a drawback, particularly for non-technical users, though it provides high-level executive summaries. The reporting model should be enhanced so that we have the flexibility to download. We have requested a few features, and they are open to accepting those requests. It needs ITSM improvements. It has out-of-the-box integration with ServiceNow, but the customer is using BMC Helix ITSM. We would like an integration with BMC Helix ITSM. When uploading CSV files without an out-of-the-box connector, duplicate entries for assets occur. We have already reported this to them, but we are not sure when they will fix it. It will significantly benefit if we can directly upload business context information from CMDB without manual merging efforts. It can also have automatic remediation capabilities through SCCM or something else.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The risk context of any vulnerability is a valuable feature."
"Vulcan Cyber has helped reduce our organization’s mean time to remediation."
"One of the features that I find valuable is the ability to bifurcate the report according to the many options available."
"Now that the solution is onboarded, we are saving a lot of time. We're saving roughly four to ten hours a week."
"The interface of Vulcan Cyber is intuitive with a lot of information about vulnerabilities, which helps in classifying and analyzing threats. We have a good view of assets and vulnerabilities. It helps to do good threat analysis because we can see exactly what the threat is and assess it accordingly."
"Vulcan enables us to automate tickets from multiple scanners. It has lots of analytics options that show us charts and allow us to view the statuses in different waves. The dashboard is nice because it's highly informative about the big picture."
"Vulcan Cyber helps us prioritize the vulnerabilities that are really exploitable and our point of interest for the industry based on the threat intelligence that we get."
"The automation capabilities using the Vulcan API platform or the API feature allow me to easily automate scripts and reports and schedule them."
"Vulcan Cyber is a very good tool."
 

Cons

"An improvement would be some sort of an integration with any GRC suite."
"We've faced situations where we required support on a Friday, and support wasn't available."
"It was a rough year in terms of setup. I had to set it up and onboard it. It was a significant effort from my side at least."
"Monitoring of the evolution of campaigns and perhaps having more customized options for monitoring them would be great."
"An important area is performance and speed, as Vulcan Cyber often lacks speed when exporting reports."
"The performance is bad. The query and the UI are always slow, and it's quite frustrating. Vulcan is trying to solve this with a newer design. The dashboard is also crowded. It pulls in all this raw information that you need to filter. Vulcan has filtering capabilities, but they're hard to manage. The labels aren't very clear, so you need to do things by trial and error. It's not as easy as other tools we've been using."
"Improvements are needed in providing more concise details on how to apply remedies for particular vulnerabilities. I would like to have more information about the remedies for particular vulnerabilities so that we do not have to go through the CVE numbers and relevant pages to check for a particular vulnerability and its remedy."
"There are several areas needing improvement. The product helps, but the reporting relies heavily on Power BI. It is limited to graphical views and requires additional filtering, posing operational challenges."
"Mainly, what I would like from them is more maintenance of the different connectors they have in the platform."
 

Pricing and Cost Advice

"I think the pricing is based on the number of endpoints, so it's more subscription-based."
"Our leadership knows better about the pricing. As per my knowledge, which might not be accurate, its price can come down."
"Its pricing is quite fair compared to what is out there in the market, especially compared to the tool from Microsoft. It is a SaaS platform that has an annual cost, so it is something that is already used by many companies. It is quite affordable."
report
Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.
881,757 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Financial Services Firm
14%
Retailer
14%
Manufacturing Company
8%
Computer Software Company
26%
Manufacturing Company
9%
Financial Services Firm
7%
Retailer
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business1
Large Enterprise10
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for Vulcan Cyber?
I don't deal with the pricing of the solution. I'm not a part of that department.
What needs improvement with Vulcan Cyber?
One area for improvement is clarity in the results column of vulnerability reports. Currently, the path where the vulnerability lies is not clear, so Vulcan needs to work on specifying the correct ...
What is your primary use case for Vulcan Cyber?
I have been using the solution for more than six months. Essentially, any reporting I do for our internal Internet assets involves using Vulcan. The primary use of Vulcan is extracting the reports,...
 

Also Known As

Kenna.VM, Kenna Security, Kenna, Kenna Security Platform
No data available
 

Interactive Demo

 

Overview

 

Sample Customers

TransUnion
Stitch Fix, Mandiant, Wealthsimple, Entrust, Anaplan, Deloitte, Origami Risk, Verana Health
Find out what your peers are saying about Qualys, Tenable, Rapid7 and others in Risk-Based Vulnerability Management. Updated: February 2026.
881,757 professionals have used our research since 2012.