No more typing reviews! Try our Samantha, our new voice AI agent.

ServiceNow Security Operations vs Tenable Vulnerability Management comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ServiceNow Security Operations
Ranking in Risk-Based Vulnerability Management
17th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
24
Ranking in other categories
Security Incident Response (1st), Security Orchestration Automation and Response (SOAR) (9th)
Tenable Vulnerability Manag...
Ranking in Risk-Based Vulnerability Management
4th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
47
Ranking in other categories
Vulnerability Management (7th), Patch Management (14th)
 

Mindshare comparison

As of November 2026, in the Risk-Based Vulnerability Management category, the mindshare of ServiceNow Security Operations is 1.8%, up from 1.3% compared to the previous year. The mindshare of Tenable Vulnerability Management is 6.2%, down from 8.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Risk-Based Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Tenable Vulnerability Management6.2%
ServiceNow Security Operations1.8%
Other92.0%
Risk-Based Vulnerability Management
 

Featured Reviews

SH
Freelancer at a media company with 1,001-5,000 employees
Gaining unified control over vulnerabilities has improved governance but pricing and support need work
The market price is slightly high. The pricing should be a little lower because this is a SaaS-based product. Everyone using ServiceNow might be getting many modules, but the overall module cost becomes high with license consumption one by one. I personally see that if ServiceNow is to grow over the next decade, they need to work on the pricing part. Cheap providers are emerging, and in the age of AI, it is evident that the chatbot and the virtual agent features, which are prominent features of ServiceNow, could be completely compromised and replaced by people choosing other tools. If ServiceNow develops a strategy to lower the price and increase the customer base, it could help ServiceNow to grow for another decade. I encountered one issue in ServiceNow Security Operations. The different tools, for example, Tenable and TVM, discovered vulnerabilities that had very limited information when imported. However, the same vulnerabilities from different sources, the TVM and Tenable, had shorter descriptions than what was present in the common vulnerabilities or CVE. If this depends on the implementer, such as Tenable or how other security operations implement them, the text was very limited. Customers were asking questions about why this was happening and if ServiceNow was working properly. The vulnerability information should be updated and the common text should be displayed every time, regardless of how many different tools are used for integration. The vulnerability database should be consistent when it comes to the description to avoid confusion for customers implementing it for the first time. This is an improvement that ServiceNow can make.
SR
Information Resources Coordinator - Application at PowerGen
Continuous monitoring has improved OT threat detection and now provides faster, accurate alerts
The best features of Tenable Vulnerability Management include vulnerability scanning, asset discovery, continuous monitoring and alerting, and the ability to report through the dashboard. The dashboard is fully customized towards our environment, and we can use that for our advantage. Out of those features, I find myself relying on the vulnerability scanning the most because it identifies known vulnerabilities and gives us the ability to understand if there is any missing configuration or security configuration. It reduces the exposure to cyber attacks and gives us a detailed view of how the OT environment is functioning. Tenable Vulnerability Management features are great, and the reporting and dashboards are easy and customizable for our environment. The reporting tool gives us immediate information or alerts based on the set parameters that we have within the infrastructure. It gives us a threat level as high, medium, or low, and this can help us to identify or determine if there is any known threat within the environment. The governance and security of Tenable Vulnerability Management is within our control, meaning the user has the power or the authority to work with the AI and to allow the AI to work within your environment in terms of what you want. For instance, the OT environment is something that is very sensitive, and you will not want the AI management tool to take over or to do certain actions within the OT environment. Therefore, as a user, you have control over the AI. Tenable Vulnerability Management provides accuracy and reliable output because it is active, it is real, and it gives updated information. The threats are real based on the alerts that we get, and after reviewing, we are sure that what we see is within our environment and it is accurate.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Basically, everything is consolidated into ServiceNow, so most organizations have configuration items in ServiceNow, ServiceNow has a vulnerability module as well, so it brings in data from third-party tools and it can utilize that data itself in Security Operations."
"The most valuable aspect of working with ServiceNow is its meaningful and feature-rich product."
"ServiceNow Security Operations provides significant control over vulnerabilities, allowing users to mark false alarms as false positives and ignore them, which is important because many vulnerabilities are not real but appear as such."
"The SOAR module of ServiceNow Security Operations is the most valuable feature"
"It gives you the ability to bring data into the system. The workflows are out of the box, and it gives you the ability to auto-assign the incidents based on criteria and vulnerabilities."
"ServiceNow is a convenient platform to raise tickets, and the respective support team will contact us to resolve any issues."
"The product has a very simple UI, I like the look and feel, and I find it very easy to navigate."
"ServiceNow Security Operations collects data from various sources and presents it in a single, respectable format for assessment and action, providing a unified user experience where all work and fixes can be managed from one location."
"The solution creates vulnerability tickets within the VM profile but should also include them under the Remediation tab so the fixes can be viewed in the ticketing queue."
"The initial setup is not complex."
"Overall, I am quite happy with Tenable.io."
"It helps us create remediation projects and assign the console’s responsibility to specific engineers."
"The solution can integrate with third parties and meets standard compliance."
"The initial setup is mostly straightforward."
"They are on a good trajectory as a company and investing in R&D in the right ways."
"The product offers good performance, with no bugs or glitches, and it doesn't crash or freeze."
 

Cons

"An area for improvement I observed in ServiceNow Security Operations is the need to maintain correct CMDB data because if you're unable to do this, you can't perfectly maintain the vulnerability data. CMDB data in ServiceNow Security Operations needs to be accurate. As I've been working on ServiceNow Security Operations for only seven months, I still need more time to try all its modules before I can give recommendations regarding additional features I'd like to see in the solution."
"The solution needs to make customization easier. You cannot do much customization immediately. It requires an extensive workload. If the customization process was user-friendly, it would be much better."
"I would like to see new features added, particularly regarding the incident upgrading part."
"Report generation within ServiceNow can take some time."
"There are limitations for the third-parties that are providing the inputs. They should increase the robustness of the solution."
"It's very slow. When you click a button or update a field, it takes forever to actually react."
"​Process framework and best practices for ease of integration between IT and security teams via incident, problem, and change.​"
"They should stick to the roadmap and continue to build plugins and integrations with other third parties, enhance the UI, and enhance the reporting. It's all good. They should just continue enhancing the releases."
"The solution seems to focus too much on enterprises, and they really need a product that works for SMBs."
"The solution must provide penetration testing."
"I would like the solution to cover the whole cycle of mitigation since it's an area where the solution currently lacks."
"They need a better approach to support. When I have hard questions that need answers to, I prefer to jump to L3 support instead of getting pushed to L1."
"More flexibility is required compared to other solutions."
"t needs additional reporting and intelligence features, as well as enhancements in AI-driven detection, which is still in its early stages."
"They should include better customization of the dashboard, and integration tools."
"The price could be lower, and the grouping of platforms on the dashboard can be included in the next release of the product."
 

Pricing and Cost Advice

"The solution is more expensive than BMC Remedy, the other ITSM tool available in the market."
"This product is a good value for the money."
"It is an expensive product."
"The product is more expensive than other solutions."
"If you're going to implement it on your own, there would be internal costs. If you're going to implement it through a contractor or consultant, you have to pay for that."
"Compared to competitor tools, ServiceNow Security Operations is more affordable"
"The tool is reasonably priced."
"The total cost we pay for this solution is over 45K. This is for a large education organization."
"A yearly payment has to be made toward the solution's licensing costs."
"The solution is not too expensive."
"Tenable.io is not known for being a cheap product."
"The product costs us around $137,000 annually for 4000 to 5000 assets."
"Tenable.io Vulnerability Management's pricing solution model isn't great."
"The cost is determined by the number of endpoints, which is approximately one dollar per endpoint."
report
Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
9%
Outsourcing Company
6%
Healthcare Company
6%
Financial Services Firm
14%
Manufacturing Company
10%
Outsourcing Company
9%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise2
Large Enterprise17
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise4
Large Enterprise22
 

Questions from the Community

What is your experience regarding pricing and costs for ServiceNow Security Operations?
In my opinion, the pricing is quite affordable considering the features, and I do not find it expensive. I would not call it cheap; rather, I am looking at it as a product owner.
What needs improvement with ServiceNow Security Operations?
I would like to see new features added, particularly regarding the incident upgrading part. For instance, if you have an instance and need to transfer it to a particular team, being able to show th...
What advice do you have for others considering ServiceNow Security Operations?
For someone looking to use ServiceNow Security Operations, I recommend that they read about the documentation and spend one or two hours familiarizing themselves with FortiGating, and that will be ...
What's the difference between Tenable Nessus and Tenable.io Vulnerability Management?
Tenable Nessus is a vulnerability assessment solution that is both easy to deploy and easy to manage. The design of the program is such that if a company should desire to handle the installation t...
What needs improvement with Tenable.io Vulnerability Management?
Tenable Vulnerability Management can be improved by providing training. Giving the administrators more detailed information such as white papers, videos, and information about new features would he...
What advice do you have for others considering Tenable.io Vulnerability Management?
I would rate Tenable Vulnerability Management at a 10. I chose a 10 for Tenable Vulnerability Management because of its scanning capabilities and what I refer to as risk prioritization such as the ...
 

Also Known As

No data available
Tenable.io
 

Overview

 

Sample Customers

DXC Technology, Freedom Security Alliance, Prime Therapeutics, Seton Hall University, York Risk Services
Global Payments AU/NZ
Find out what your peers are saying about ServiceNow Security Operations vs. Tenable Vulnerability Management and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.