Try our new research platform with insights from 80,000+ expert users

DefectDojo vs Tenable Security Center comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

DefectDojo
Ranking in Vulnerability Management
42nd
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
1
Ranking in other categories
DevSecOps (10th)
Tenable Security Center
Ranking in Vulnerability Management
6th
Average Rating
8.2
Reviews Sentiment
7.2
Number of Reviews
56
Ranking in other categories
Cloud Security Posture Management (CSPM) (12th), Risk-Based Vulnerability Management (4th)
 

Mindshare comparison

As of February 2026, in the Vulnerability Management category, the mindshare of DefectDojo is 0.8%, up from 0.4% compared to the previous year. The mindshare of Tenable Security Center is 3.1%, down from 6.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Tenable Security Center3.1%
DefectDojo0.8%
Other96.1%
Vulnerability Management
 

Featured Reviews

reviewer2267097 - PeerSpot reviewer
Integration and Solution Architect at a government with 501-1,000 employees
Easy to use with efficient vulnerability reporting and team collaboration
Use case, so all the reports from GitLeaks, DefectDojo, GitLeaks or dependency check or Trivy, they make reports, and we send this report to DefectDojo to have CVMs, Central Vulnerability Management. DefectDojo is Central Vulnerability Management. If you have a dashboard to set, we have…
OndrejKOVAC - PeerSpot reviewer
Solution engineer at EXPERTience
Empower clients with risk-based vulnerability management through continuous workflow and valuable insights
Tenable Security Center could improve by implementing more dynamic data displays and translating reports into European languages. This is especially relevant in Central Eastern Europe, where clients often require reports in local languages. Additionally, the licensing model could be more flexible for managed security providers, similar to a pay-as-you-go model.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"With the pipeline of detection and DefectDojo, we are able to see the real vulnerabilities, and we fix them."
"Tenable Security Center's centralized platform helped with risk assessment and management across our IT environments, covering the patching process and providing detailed reports that significantly supported our reporting and audits and helped us close audit issues safely and successfully."
"Support is knowledgeable."
"The feature we've liked most recently was being able to take the YARA rules from FireEye and put them into Tenable's scan for the most recent SolarWinds exploit. That was really useful."
"Tenable SC is good for reporting and alerting. The filtering feature is also very valuable. Its integration with multiple vendors is quite good. It can be integrated with SIEM solutions and PAM solutions such as Thycotic, which is very helpful."
"It allows financial institutions to compare their vulnerability management to others in the same sector."
"It basically reviews our threat landscape vulnerability."
"The tool gives us fewer false positives. Compared to its competitors, the solution’s reports are more accurate."
"I think that this is a good solution for evaluating vulnerability in the network."
 

Cons

"We need something to notify the team responsible for a product when vulnerabilities are found."
"There is not much room for improvement. However, there should be a guide that describes the step-by-step procedures for doing tasks. Otherwise, training is required from a senior guy to a junior guy."
"Tenable.sc's user interface could be improved."
"The solution should provide better web application features and support."
"The pricing is reasonable, but this could be brought down more aggressively, such as we see with Rapid7, Tenable SC's main competitor."
"The reports and plugins for reports and scans could benefit from enhancements."
"Tenable's reporting engine needs improvement. It needs to be more efficient and add more features."
"The biggest issue I have with the solution is when I'm using the scanning it picks up the original DNS of that device. That means, before we image it and actually change the DNS to something within our company structure, it'll just be random numbers and letters and Tenable will stick to that DNS for a long time."
"At times we have had the typical bugs."
 

Pricing and Cost Advice

Information not available
"Tenable is open-source."
"The pricing is more than Nexpose."
"For 500 users the licensing fee is roughly $100,000."
"The price can start at €10,000 ($13,000 USD) for between 500 and 1,000 assets, and the price can climb into the millions as more assets are added."
"We're a Fortune 500 company... our licensing costs [are] in the seven figures."
"The tool provides competitive pricing."
"The tool costs around 15,000 Saudi riyals monthly."
"We pay around 60,000 on a yearly basis."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
881,707 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
13%
Comms Service Provider
13%
Manufacturing Company
9%
Financial Services Firm
12%
Manufacturing Company
10%
Government
10%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise10
Large Enterprise27
 

Questions from the Community

What is your experience regarding pricing and costs for DefectDojo?
The pricing is great. It is much cheaper compared to other solutions. We don't want to pay for things we are able to do on our own.
What needs improvement with DefectDojo?
We need something to notify the team responsible for a product when vulnerabilities are found. We are able to attach a team or a manager for a product, however, we are not able to send them a notif...
What is your primary use case for DefectDojo?
Use case, so all the reports from GitLeaks, DefectDojo, GitLeaks or dependency check or Trivy, they make reports, and we send this report to DefectDojo to have CVMs, Central Vulnerability Managemen...
What do you like most about Tenable SC?
The tool's dashboard and reporting capabilities match our company's needs since we are able to modify the basic view to create a new dashboard, and it works out very well for our needs.
What is your experience regarding pricing and costs for Tenable SC?
The price of Tenable Security Center is not so high; it's relatively a cheaper solution.
What needs improvement with Tenable SC?
We did conduct a long implementation which relates to what I think can be improved about Tenable Security Center. In some cases, we needed to refer back to Tenable itself, and in other cases, we ne...
 

Also Known As

No data available
Tenable.sc, Tenable Unified Security, Tenable SecurityCenter
 

Overview

 

Sample Customers

Information Not Available
IBM, Sempra Energy, Microsoft, Apple, Adidas, Union Pacific
Find out what your peers are saying about Wiz, Tenable, Qualys and others in Vulnerability Management. Updated: January 2026.
881,707 professionals have used our research since 2012.