Try our new research platform with insights from 80,000+ expert users

Microsoft Entra ID Governance vs Tenable Cloud Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 2, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Entra ID Governance
Ranking in Identity and Access Management as a Service (IDaaS) (IAMaaS)
10th
Average Rating
7.6
Reviews Sentiment
6.3
Number of Reviews
13
Ranking in other categories
No ranking in other categories
Tenable Cloud Security
Ranking in Identity and Access Management as a Service (IDaaS) (IAMaaS)
13th
Average Rating
8.4
Reviews Sentiment
6.5
Number of Reviews
12
Ranking in other categories
Container Security (23rd), Cloud Workload Protection Platforms (CWPP) (12th), Cloud Security Posture Management (CSPM) (17th), Cloud-Native Application Protection Platforms (CNAPP) (13th), Cloud Infrastructure Entitlement Management (CIEM) (4th)
 

Mindshare comparison

As of January 2026, in the Identity and Access Management as a Service (IDaaS) (IAMaaS) category, the mindshare of Microsoft Entra ID Governance is 2.4%, up from 0.8% compared to the previous year. The mindshare of Tenable Cloud Security is 0.8%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Identity and Access Management as a Service (IDaaS) (IAMaaS) Market Share Distribution
ProductMarket Share (%)
Microsoft Entra ID Governance2.4%
Tenable Cloud Security0.8%
Other96.8%
Identity and Access Management as a Service (IDaaS) (IAMaaS)
 

Featured Reviews

JG
Lead Cloud Systems Architect at a computer software company with 5,001-10,000 employees
Access reviews and lifecycle policies have streamlined privileged account oversight and onboarding automation
I am not using the access review agent feature in Microsoft Entra ID Governance because that is in preview right now, and I do not know if that is available. My perception of Microsoft Entra ID Governance's ability to handle large volumes of users access and management tasks is good. There is a slight delay from creation of the actual access review to how long it takes to complete the actual review. For us, we are a large organization with over ten thousand employees. If we are doing a review on a larger group that has thousands of employees inside of it, it takes a while to actually complete, and then it becomes a headache for managers. If there were a way to condense that or decrease the amount of time it takes to do it, that would be better. We inspect thousands of people. Microsoft Entra ID Governance can be improved, and I actually have two tickets in with you now about improvements. I would have to dig it up because I do not know off the top of my head, but you can find it. We have two tickets that have been put in by the FastTrack team that I work with for identity governance. I think it was something about the ability to stop reviews early. When you create an access review now, and you put a time gate on it, say it is the end of this week, once the access review is finished, the managers went in there and finished the access review, you cannot finish it until the end of the week. That is a slight problem because we do not get a notification for people that are on the identity side that they have actually finished that, and I think there are two tickets in for that right now.
CD
Information Security Architect at WSP
Has significantly improved proactive monitoring through automated asset discovery and seamless integration with cloud environments
Making the system smarter would be beneficial. Adding modules for integration with AWS and Azure would be helpful. Adding capabilities for the scanner to automatically pick up changes and add assets automatically would be valuable. When discussing a big company, it is mandatory to have tools that will assist us rather than waiting for manual input to add hosts. Adding assets manually is prone to mistakes. Humans might forget to add an asset or make errors when adding multiple assets. Taking the human element out of the context and making it more streamlined is the future for security. The human should be involved where expertise is needed, such as analysis and decision-making. Currently, with resource constraints, we need tools to collect and aggregate data, eliminate false positives as much as possible, and present relevant information to employees for action.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Regarding Microsoft Entra ID Governance integration with Microsoft services, there is automated identity lifecycle management in the product."
"I am very happy with the solution."
"The most valuable feature of Microsoft Entra ID Governance for identity management is multi-factor authentication."
"The solution is fully scalable, supporting everything from small companies to large enterprises."
"The features of Microsoft Entra ID Governance have benefited our organization because we have ServiceNow in our organization and we have been able to create integrations through Lifecycle Management to do onboarding and offboarding easier."
"It is compliant with our RVRT and CSV guidelines."
"The product's most valuable features are the robust audit trail capabilities."
"The most valuable feature of Microsoft Entra ID Governance is access reviews."
"Ermetic can provide super visibility for our cloud environment (we are using AWS)."
"The analytical and reporting capabilities are pretty straightforward and show every transaction and major attempt to attack the application in the cloud."
"Scanning and reporting are the most valuable features of Tenable Cloud Security"
"Tenable Cloud Security excels in vulnerability detection, one of its strongest features. Another valuable feature is software composition analysis, which highlights and automates the detection of security flaws. Additionally, their knowledge base is excellent; if anything goes wrong, they provide clear guidance on what needs to be done to address specific vulnerabilities."
"The product's visibility and remediation work fine for me."
"The product's deployment phase is easy."
"Element is precisely what we needed for close to real-time external surface monitoring, and the automatic integration capabilities, particularly with DNS, Azure, and AWS, are extremely valuable."
"The tool alerts us on depreciating performance or deficiencies of our web application. It helps us react on time."
 

Cons

"Bridging between on-premises and cloud services has the potential for improvement. For instance, it would be beneficial to be able to synchronize traditional directory schemas with Azure. I need to maintain an on-premises Active Directory server for certain required services."
"Microsoft has done a commendable job with RPAX. However, Microsoft should prioritize enhancing its ABAC (Attribute-Based Access Control) capabilities. Currently, Microsoft's ABAC offering falls behind AWS in comparison."
"One area for improvement in Microsoft Entra ID Governance could be providing more granular control over security policies."
"There are some areas where improvements are necessary. Even though we have almost the full package, there are some bugs."
"The product's workflow approval process needs improvement."
"Microsoft Entra ID Governance is relatively new, and some features require more development. For example, when creating user access review campaigns, we can't specify the time to send emails to reviewers—only the date."
"Microsoft Entra ID Governance should improve its capability to manage identities and access from a single console."
"Even though we have almost the full package, there are some bugs."
"I have faced several bug incidents with the solution"
"There is a need for the support team to improve their response time since it is one of the areas where the product's technical team has certain shortcomings."
"The product must provide more features."
"Tenable needs to offer a patch-based solution since it is an area where the tool lacks a bit."
"If Tenable Cloud Security offers a complete Cnapp solution with CWP, CIEM, and Waap security, it will be able to compete with other competitors."
"Ermetic needs to improve its security scanning. I would like to see more dynamic graphical forms."
"We still maintain Tenable Cloud Security but have reduced the number of licenses. We now use it occasionally to validate specific items rather than monitoring the entire surface, for which we use Element."
"Due to its robust nature, the platform's adoption can be overwhelming initially. However, once organizations start using it, they tend to get used to it. I haven't had much direct interaction with the support team, but some partners have reported a desire for better support for the product."
 

Pricing and Cost Advice

"There are no additional costs besides the standard licensing fees."
"The solution's pricing is not low but reasonable."
"In the education sector where I work, the annual cost for my Google and Microsoft environments is approximately $35,000. This covers the needs of 3,400 students and 800 faculty and staff members."
"While other products give the pricing for their application, Microsoft Entra ID Governance has a per-user-based license model."
"The tool's price is good compared to other brands. The tool's subscription is for a year."
"The tool's pricing is fair."
"There is a need to opt for a subscription-based pricing model to use Tenable Cloud Security. I rate the product price an eight on a scale of one to ten, where one is low price and ten is high price."
report
Use our free recommendation engine to learn which Identity and Access Management as a Service (IDaaS) (IAMaaS) solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Manufacturing Company
7%
Healthcare Company
7%
Energy/Utilities Company
7%
Government
11%
Computer Software Company
11%
Financial Services Firm
10%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise9
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise2
Large Enterprise5
 

Questions from the Community

What do you like most about Microsoft Entra ID Governance?
The most valuable feature of Microsoft Entra ID Governance is access reviews.
What needs improvement with Microsoft Entra ID Governance?
I am not using the access review agent feature in Microsoft Entra ID Governance because that is in preview right now, and I do not know if that is available. My perception of Microsoft Entra ID Gov...
What is your primary use case for Microsoft Entra ID Governance?
My main use cases for Microsoft Entra ID Governance are access reviews, but specifically Privileged Identity Management access reviews. I am utilizing the user-centric access reviews in Microsoft E...
What do you like most about Tenable Cloud Security?
The solution’s vulnerability management feature has helped us identify and mitigate risks well.
What needs improvement with Tenable Cloud Security?
Making the system smarter would be beneficial. Adding modules for integration with AWS and Azure would be helpful. Adding capabilities for the scanner to automatically pick up changes and add asset...
What is your primary use case for Tenable Cloud Security?
We had other solutions that we used. One solution was that we did not have something exactly similar to what Element is doing. For example, we were using Bitsight, Evelin, and also Tenable Cloud Se...
 

Also Known As

No data available
Ermetic, Ermetic Identity Governance for AWS
 

Overview

 

Sample Customers

Information Not Available
Tyler Technologies, Bilfinger, BarkBox, MongoDB, airSlate, Adama, Latch, Cloudinary, Riskified, AppsFlyer, IntelyCare, Aidoc, 42Dot, and more.
Find out what your peers are saying about Microsoft Entra ID Governance vs. Tenable Cloud Security and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.