No more typing reviews! Try our Samantha, our new voice AI agent.

Cisco Vulnerability Management (formerly Kenna.VM) vs Vulcan Cyber comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Vulnerability Managem...
Ranking in Risk-Based Vulnerability Management
22nd
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
1
Ranking in other categories
Cisco Security Portfolio (11th)
Vulcan Cyber
Ranking in Risk-Based Vulnerability Management
9th
Average Rating
7.4
Reviews Sentiment
7.1
Number of Reviews
11
Ranking in other categories
Vulnerability Management (27th), Cloud Security Remediation (2nd)
 

Mindshare comparison

As of May 2026, in the Risk-Based Vulnerability Management category, the mindshare of Cisco Vulnerability Management (formerly Kenna.VM) is 2.4%, up from 2.2% compared to the previous year. The mindshare of Vulcan Cyber is 2.9%, up from 2.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Risk-Based Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Vulcan Cyber2.9%
Cisco Vulnerability Management (formerly Kenna.VM)2.4%
Other94.7%
Risk-Based Vulnerability Management
 

Featured Reviews

AshishPaliwal - PeerSpot reviewer
Self-employed at Self-employed
Offers contextual prioritization and risk-based remediation of vulnerability
An improvement would be some sort of an integration with any GRC suite. There are a lot of GRC suites available, like Archer, MetricStream, Rsam, Protiviti, for example. So how would a solution like this work if my company has already invested thousands or maybe millions in a GRC solution? Do I still need it and how does it fit into an existing SAP environment? There could be interoperability, having more data sources, integrating Splunk, Qualys, FireEye, Rapid7, Carbon Black. I'm sure all that can be done to an extent, with a little more insight and a little more accuracy on the industry numbers and trends. I'd like the solution to offer any sort of assistance in any way with the remediation part, not just identification of vulnerability risk, and that is second.
reviewer2649297 - PeerSpot reviewer
Technical Architect at a manufacturing company with 10,001+ employees
Streamlines prioritization but reporting needs enhancement
There are several areas needing improvement. The product helps, but the reporting relies heavily on Power BI. It is limited to graphical views and requires additional filtering, posing operational challenges. The inability to download specific asset details directly from the Power BI portal is a drawback, particularly for non-technical users, though it provides high-level executive summaries. The reporting model should be enhanced so that we have the flexibility to download. We have requested a few features, and they are open to accepting those requests. It needs ITSM improvements. It has out-of-the-box integration with ServiceNow, but the customer is using BMC Helix ITSM. We would like an integration with BMC Helix ITSM. When uploading CSV files without an out-of-the-box connector, duplicate entries for assets occur. We have already reported this to them, but we are not sure when they will fix it. It will significantly benefit if we can directly upload business context information from CMDB without manual merging efforts. It can also have automatic remediation capabilities through SCCM or something else.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The risk context of any vulnerability is a valuable feature."
"The risk context of any vulnerability is a valuable feature; that is what it is used for and then data from different sources can be fed into it, and they have good dashboards, risk meters, and virtualization."
"The most notable aspects include having prioritization capabilities and custom scripts."
"The interface of Vulcan Cyber is intuitive with a lot of information about vulnerabilities, which helps in classifying and analyzing threats. We have a good view of assets and vulnerabilities. It helps to do good threat analysis because we can see exactly what the threat is and assess it accordingly."
"Vulcan enables us to automate tickets from multiple scanners. It has lots of analytics options that show us charts and allow us to view the statuses in different waves. The dashboard is nice because it's highly informative about the big picture."
"The automation capabilities using the Vulcan API platform or the API feature allow me to easily automate scripts and reports and schedule them."
"They recently upgraded their UI, which is great. It is user-friendly."
"Vulcan Cyber gives the remediation team the focus points."
"It is very good when it comes to ingesting information from different sources and then displaying this information in an easy-to-use platform."
"There is a lot of flexibility in exporting, making it a really good feature. The exporting flexibility based on application type is commendable and provides significant value."
 

Cons

"An improvement would be some sort of an integration with any GRC suite."
"An improvement would be some sort of an integration with any GRC suite."
"Improvements are needed in providing more concise details on how to apply remedies for particular vulnerabilities."
"I would rate the tool between six and seven because there have been instances when the tool was down, and I couldn't access Cyber reports. Additionally, the Vulcan Cyber team made changes to the tool and did not notify us."
"The product helps, but the reporting relies heavily on Power BI. It is limited to graphical views and requires additional filtering, posing operational challenges."
"It was a rough year in terms of setup. I had to set it up and onboard it. It was a significant effort from my side at least."
"The fact that we cannot use it for our reporting leads me to rate it three out of ten."
"Improvements are needed in providing more concise details on how to apply remedies for particular vulnerabilities. I would like to have more information about the remedies for particular vulnerabilities so that we do not have to go through the CVE numbers and relevant pages to check for a particular vulnerability and its remedy."
"An important area is performance and speed, as Vulcan Cyber often lacks speed when exporting reports."
"We've faced situations where we required support on a Friday, and support wasn't available."
 

Pricing and Cost Advice

"I think the pricing is based on the number of endpoints, so it's more subscription-based."
"Its pricing is quite fair compared to what is out there in the market, especially compared to the tool from Microsoft. It is a SaaS platform that has an annual cost, so it is something that is already used by many companies. It is quite affordable."
"Our leadership knows better about the pricing. As per my knowledge, which might not be accurate, its price can come down."
report
Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.
893,244 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Retailer
16%
Computer Software Company
13%
Financial Services Firm
11%
Manufacturing Company
9%
Computer Software Company
24%
Manufacturing Company
8%
Construction Company
8%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business1
Large Enterprise10
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for Vulcan Cyber?
I don't deal with the pricing of the solution. I'm not a part of that department.
What needs improvement with Vulcan Cyber?
One area for improvement is clarity in the results column of vulnerability reports. Currently, the path where the vulnerability lies is not clear, so Vulcan needs to work on specifying the correct ...
What is your primary use case for Vulcan Cyber?
I have been using the solution for more than six months. Essentially, any reporting I do for our internal Internet assets involves using Vulcan. The primary use of Vulcan is extracting the reports,...
 

Also Known As

Kenna.VM, Kenna Security, Kenna, Kenna Security Platform
No data available
 

Interactive Demo

 

Overview

 

Sample Customers

TransUnion
Stitch Fix, Mandiant, Wealthsimple, Entrust, Anaplan, Deloitte, Origami Risk, Verana Health
Find out what your peers are saying about Qualys, Horizon3.ai, Tenable and others in Risk-Based Vulnerability Management. Updated: April 2026.
893,244 professionals have used our research since 2012.