


Tenable Vulnerability Management and Microsoft Defender Vulnerability Management compete in vulnerability management. Microsoft Defender has the upper hand with seamless integration within the Microsoft ecosystem, while Tenable is favored for comprehensive scanning capabilities and broader platform support.
Features: Tenable Vulnerability Management has robust scanning functionalities, support for a wide array of platforms, and diverse policy frameworks. Microsoft Defender leverages strong ties to Azure Active Directory and Intune for enhanced threat detection, integrates seamlessly within Microsoft ecosystems, and offers end-to-end security solutions.
Room for Improvement: Tenable could improve by enhancing integration options for Microsoft-specific environments, increasing user interface intuitiveness, and expanding reporting capabilities. Microsoft Defender may enhance platform support for non-Microsoft environments, provide more flexibility in policy frameworks, and streamline cross-platform threat analysis.
Ease of Deployment and Customer Service: Tenable offers straightforward deployment with flexible options for diverse IT environments and reliable support. Microsoft Defender capitalizes on existing infrastructure, ensuring smooth deployment for Microsoft-centric organizations, supported by integrated security services.
Pricing and ROI: Tenable's cost structure has clear licensing options, providing substantial ROI through effective risk management across platforms. Microsoft Defender’s pricing aligns well for businesses in the Microsoft ecosystem, offering competitive ROI through consolidated billing and package bundling with other Microsoft services.
It has saved about 90% of our time.
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
CallStream helps us integrate and automate tasks.
Organizations typically do not rely solely on Microsoft products to avoid putting all eggs in one basket, which presents a challenge for maximizing ROI.
As a Microsoft partner, we receive significant discounts, making the solution affordable for us.
They are helpful, respond to my queries, and can answer any question.
Qualys's tech support is highly responsive, providing multiple ways to interact with them.
Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA.
They are sometimes responsive, however, often issues cannot be reproduced on their end, making it challenging.
The support we receive from Microsoft is declining, and for example, after taking advanced support, we have not received satisfactory answers.
They are familiar with Microsoft products but are not direct Microsoft staff, which is an area needing improvement.
It needs improvement in response time and addressing feature requests promptly.
The technical support of Tenable Vulnerability Management is available 24/7, and whenever we require support, we can get it within five minutes.
We had used Tenable's expert support services in order to make sure that we run Tenable Vulnerability Management on a continuous basis and are able to utilize their services.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
Our organization currently uses it to manage over 1200 web applications.
It is absolutely scalable, and I would rate its scalability as nine out of ten.
The integration is straightforward for those who understand it, though documentation needs improvement.
It is scalable; I evaluated the product and decided to use Defender on over 700 of our company servers.
They can seamlessly scale the number of endpoints from 100 to 1,000,000 in a day.
Tenable Vulnerability Management is highly scalable.
With the growing needs of our company, Tenable Vulnerability Management is able to safely adapt.
Overall, the support provided has been excellent.
It is a stable solution, which is why we chose it.
Continuous monitoring is crucial to ensure system stability and avoid vulnerabilities or threats.
There are compatibility issues occasionally arising with false positives when other security tools are not whitelisted in Microsoft Defender.
It is very resource-intensive, consuming a lot of memory and CPU.
If Microsoft experiences downtime, this solution goes down as it is a SaaS-based solution where we have no control.
I have faced no stability issues with Tenable.
The stability is commendable, and I would rate Tenable ten out of ten.
The stability of Tenable Vulnerability Management is highly reliable.
Ideally, the scanner should automatically detect and scan all subdomains, even if not explicitly defined, ensuring comprehensive vulnerability assessment.
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
This scoring should be for specific industries as well. If I belong to the healthcare industry using Microsoft Defender Vulnerability Management, it should provide me with a risk score and show how I fare against the risk score of my industry.
A vulnerability I patch within 15 minutes takes 24 additional hours for an update.
The product is not stable; it often uses excessive memory and CPU, which makes it slow.
They should also accelerate the process of implementing new features upon request.
I would suggest HP WebInspect as a better option than Tenable.io.
Tenable Vulnerability Management is not very effective for real-time risk prioritization for our organization's security strategy.
Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive.
Pricing is managed by our finance team; however, Qualys TotalCloud offers cost-effective licensing flexibility.
Qualys TotalCloud is expensive, but it offers a premier solution with no headaches.
Overall, every organization wishes for cheaper options, but we look at the security side as well, so we are good for now.
For non-partners, however, the cost could be seen as higher, between seven to ten.
The pricing is reasonable, and it's included in the whole Microsoft E5 bundle, so it's all-inclusive.
Tenable charges around $40 per device, while Rapid7 costs $10 to $15 per device.
I would not say very expensive for Tenable Vulnerability Management; it is not prohibitive, but at the same time, there are some other tools in the marketplace which are offering the same kind of services that Tenable offers, the same kind of features that Tenable has offered at a lesser cost.
This view of risk helps reduce the work we would have to do to combine multiple sources to prioritize risk.
It will help cybersecurity professionals monitor the cloud and find vulnerabilities.
We are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs.
The main advantage of Microsoft Defender Vulnerability Management is that it can locate and prevent most threats even when the endpoints are not connected to the corporate network, as long as the internet is available.
The feature for customizing to region-specific and domain-specific requirements in healthcare is particularly beneficial.
The most valuable aspect is the kind of assessment results I get, and the recommendations provided in Microsoft products really help in taking care of the resources.
Tenable enables vulnerability management through potential AI integration that consolidates efforts and resolves multiple vulnerabilities simultaneously.
The main benefit of integration with Tenable Vulnerability Management is that there will be no lack of missing vulnerabilities when it comes to the patching environment.
The main benefits that Tenable Vulnerability Management provides for me as an end user include saving time and money and streamlining processes.
| Product | Mindshare (%) |
|---|---|
| Tenable Vulnerability Management | 2.8% |
| Qualys TotalCloud | 1.0% |
| Microsoft Defender Vulnerability Management | 1.6% |
| Other | 94.6% |

| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 3 |
| Large Enterprise | 29 |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 2 |
| Large Enterprise | 8 |
| Company Size | Count |
|---|---|
| Small Business | 20 |
| Midsize Enterprise | 3 |
| Large Enterprise | 22 |
Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.
Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.
What are the most important features of Qualys TotalCloud?Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.
Microsoft Defender Vulnerability Management enables organizations to identify vulnerabilities, manage patches, and fortify threat detection. It offers endpoint assessments, cloud incident management, and dynamic security through Microsoft's Security Scorecard integration.
Organizations leverage Microsoft Defender Vulnerability Management for advanced threat detection and response. It provides robust tools for vulnerability assessment and cloud incident management, integrated with Microsoft's Security Scorecard to enhance dynamic security profiling. Key features include automatic patch deployment, security configuration management, and seamless integration with Microsoft platforms, benefiting both on-prem and cloud environments. Organizations can track vulnerabilities with severity-based reports, helping manage outdated software and minimizing threat exposure.
What are the key features of Microsoft Defender Vulnerability Management?In healthcare, Microsoft Defender Vulnerability Management helps manage compliance with health regulations, while in finance, it aids in securing sensitive data from cyber threats. Manufacturing sectors benefit from its patch management, keeping operational technology systems less vulnerable to disruptions.
Tenable Vulnerability Management offers efficient scanning, reporting, and integration capabilities. It supports extensive visibility and risk management for diverse environments while providing a user-friendly experience with strong cloud capabilities and container scanning.
Tenable Vulnerability Management is crucial for vulnerability assessment and managing security across network infrastructures. It effectively handles cloud and on-premises scans, identifying risks and enhancing cybersecurity measures with detailed reports. With features like automated scanning and risk prioritization, users manage vulnerabilities efficiently. Despite its strong points, improvements in pricing, navigation, and customization are desired, alongside better integration and AI-driven detection.
What are the most important features of Tenable Vulnerability Management?In industries like finance, healthcare, and education, Tenable Vulnerability Management supports robust cybersecurity measures. Organizations utilize it for scanning IT infrastructures, conducting cloud assessments, and performing endpoint analysis to mitigate threats in critical environments.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.