Before, they did not have an agent-based solution. Last year, they developed one. For example, before, when users were roaming or working from home, we wouldn't be able to scan previously. Now, we can cover anyone, even off-site.
Technical Lead Information Security at Australian OpCo Pty Ltd.
Easy to deploy, simple to maintain, and very user-friendly
Pros and Cons
- "The interface is fine."
- "The solution is a bit slow."
What is our primary use case?
What is most valuable?
The most valuable feature is the configuration audit.
The interface is fine.
We haven't had issues with support.
The solution is easy to deploy and maintain.
The solution can scale well.
The entire product is very easy to use.
What needs improvement?
The solution is a bit slow. It should be faster. They could improve the performance.
For how long have I used the solution?
We primarily use the solution for vulnerability management and confidential information detection, for example, credit card information. We also use it for configuration management.
Buyer's Guide
Tenable Vulnerability Management
May 2026
Learn what your peers think about Tenable Vulnerability Management. Get advice and tips from experienced pros sharing their opinions. Updated: May 2026.
900,747 professionals have used our research since 2012.
What do I think about the scalability of the solution?
The scalability is great. I'd rate it nine out of ten. A company can expand it if they would like to.
How are customer service and support?
Technical support is okay. The issue is they don't have a team based in India. Sometimes, it's hard to get support on time. However, they are pretty helpful.
Which solution did I use previously and why did I switch?
We are also using Tenable.sc, version 6.0.
How was the initial setup?
The initial setup is pretty straightforward. I'd rate the process eight out of ten overall. It is not overly complex.
We can implement the solution in one week in one region.
In terms of maintenance, we only really need one person. That's enough.
What's my experience with pricing, setup cost, and licensing?
I do not manage the licensing or pricing. My team handles this aspect.
Which other solutions did I evaluate?
We did test multiple other solutions.
What other advice do I have?
I'm an end-user.
This is an agent-based solution. There isn't a specific version we use.
The solution is very user-friendly if you compare it to other tools. I'd rate it eight out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Consultant at Tata Consultancy
Reliable with good scanning and good performance
Pros and Cons
- "It is quite straightforward to set up."
- "The product offers good performance, with no bugs or glitches, and it doesn't crash or freeze."
- "We'd like to see a bit more user-friendliness. They need to work on that aspect of the solution."
What is our primary use case?
The solution is mainly for vulnerability scanning management. It's more like an extension of the Nessus.
What is most valuable?
I like the ten points of scanning.
The performance is good.
It is quite straightforward to set up.
The solution is stable, and it is quite scalable.
What needs improvement?
We'd like to see a bit more user-friendliness. They need to work on that aspect of the solution.
For how long have I used the solution?
We've recently adopted the solution and have been dealing with it for just over a year or so.
What do I think about the stability of the solution?
The product offers good performance. There are no bugs or glitches. It doesn't crash or freeze.
What do I think about the scalability of the solution?
This is a scalable solution. It's easy to expand.
I'm not sure how many users there are, however, my understanding is there are more than ten people.
How are customer service and support?
We've never had any real difficulties, and therefore we haven't really dealt with support.
How was the initial setup?
The solution is easy to set up. It's straightforward. It's not overly complex.
It's based on landscape dependencies. However, it's easily deployed. It can take a few weeks to set up. If you are deploying across the globe, it might take longer.
What was our ROI?
I don't work in an area that would keep track of ROI. I can't say we have been following that.
What's my experience with pricing, setup cost, and licensing?
We pay for an annual license.
If there are extra fees, it depends on what use cases you want to deploy. If you want to use simple vulnerability management and you want to extend it to application scanning, then pricing modules will be different.
What other advice do I have?
I'd recommend the solution to others.
I would rate the solution nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Tenable Vulnerability Management
May 2026
Learn what your peers think about Tenable Vulnerability Management. Get advice and tips from experienced pros sharing their opinions. Updated: May 2026.
900,747 professionals have used our research since 2012.
Senior Manager -Cloud Security at Capgemini
Full-service solution that gives a good ROI
Pros and Cons
- "The initial setup is straightforward so long as your infrastructure, components, and networks are in place."
- "Tenable.io Vulnerability Management gives a good ROI in the long run, though it would be better with a pay-as-you-go model."
- "Tenable.io Vulnerability Management could be improved with an increased number of dashboards and MSSP integration."
- "Tenable is a full-service product, but it still has a lot of improvements to make, so I'd recommend exploring other products before implementing it."
What is our primary use case?
Tenable.io Vulnerability Management is used as a unified platform for vulnerability management.
What needs improvement?
Tenable.io Vulnerability Management could be improved with an increased number of dashboards and MSSP integration.
For how long have I used the solution?
I've been working with Tenable.io Vulnerability Management for five years.
What do I think about the stability of the solution?
Tenable.io Vulnerability Management is stable.
What do I think about the scalability of the solution?
Tenable.io Vulnerability Management is scalable.
How are customer service and support?
Tenable doesn't provide support beyond documentation.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial setup is straightforward so long as your infrastructure, components, and networks are in place. There are also a few teaching issues post-migration, like integration with third parties and SEO integrations.
What was our ROI?
Tenable.io Vulnerability Management gives a good ROI in the long run, though it would be better with a pay-as-you-go model.
What's my experience with pricing, setup cost, and licensing?
Tenable.io Vulnerability Management's pricing solution model isn't great. Providing a pay-as-you-go option would be an improvement.
What other advice do I have?
Tenable is a full-service product, but it still has a lot of improvements to make, so I'd recommend exploring other products before implementing it. I would give Tenable.io Vulnerability Management a rating of nine out of ten.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Useful for penetration testing but reporting functionality needs improvement
Pros and Cons
- "It's a recommended tool for penetration testers because it's effective for that purpose."
- "The tool's reports are bad. They're not very customizable or flexible. During audits, we often have to exclude things that aren't relevant to our organization, but we can't do that easily with the reports. They come in HTML or PDF format, and we can't compare current results with previous ones in Excel because we never receive reports in Excel."
What needs improvement?
The tool's reports are bad. They're not very customizable or flexible. During audits, we often have to exclude things that aren't relevant to our organization, but we can't do that easily with the reports. They come in HTML or PDF format, and we can't compare current results with previous ones in Excel because we never receive reports in Excel.
For how long have I used the solution?
I have been using the product for a year, and my organization has been using it for six to seven years.
What do I think about the stability of the solution?
Tenable Vulnerability Management is stable.
What do I think about the scalability of the solution?
I rate the tool's scalability a seven out of ten.
How are customer service and support?
The solution's support is okay, but it could be more customer-friendly. The people providing support have knowledge, but they could improve customer interaction.
How was the initial setup?
The tool's deployment can be challenging, especially for those unfamiliar with Kali Linux, as it operates on this platform. This might make the setup process difficult for users accustomed to other operating systems like Windows. It may take a couple of tries to get comfortable with the process. However, once you have set it up a few times, it becomes easier.
What other advice do I have?
Sometimes, we use the tool for tasks like configuration and running scans. However, it's a bit difficult to use compared to Qualys. One issue we've noticed is that it takes up a lot of space, which customers often complain about. They promised more system coverage and updates, but it isn't happening.
I rate Tenable Vulnerability Management a seven out of ten. It might be challenging if you're used to working on Windows. However, it's a recommended tool for penetration testers because it's effective for that purpose.
We use it for audit and PT.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Cyber Security Analyst at Platview Technologies
A stable and easy-to-use solution that scans vulnerabilities in assets and provides suggestions for remediation
Pros and Cons
- "The solution is very simple to use."
- "The solution must provide penetration testing."
What is our primary use case?
The solution scans vulnerabilities in assets like workstations, network devices, desktops, or laptops. The product indicates vulnerabilities based on severity levels. There are high, critical, medium, low, and informational levels of severity.
What is most valuable?
The product can scan assets and web applications. It provides remediation for each vulnerability it scans. We get to know the actions we have to take to remediate the vulnerabilities. The solution is very simple to use. It also has cloud scanners. We can integrate Tenable and Nessus Scanner. It is easier to use.
What needs improvement?
The solution must provide penetration testing.
For how long have I used the solution?
I have been using the solution since 2022.
What do I think about the stability of the solution?
The tool is very stable.
What do I think about the scalability of the solution?
The tool is scalable.
How are customer service and support?
We don't have many issues.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup is very easy.
What other advice do I have?
The tool is easy to use and deploy. It's easy for customers to go through the documentation, see how it works, and scan their assets. Everything is straightforward, including the creation of users and enabling 2FA. Overall, I rate the tool a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company has a business relationship with this vendor other than being a customer. Customer/Partner
Security engineer at a construction company with 1,001-5,000 employees
Has a valuable remediation feature, but it could be easier to set up on the cloud
Pros and Cons
- "It helps us create remediation projects and assign the console’s responsibility to specific engineers."
- "The product could be easier to set up on the cloud."
What is our primary use case?
We use the software to manage vulnerabilities in our environment.
What is most valuable?
The product’s most valuable feature is remediation. It shows a list of vulnerabilities per server once you scan on cloud or on-premise instances. It helps us create remediation projects and assign the console’s responsibility to specific engineers. We can set up a follow-up date depending on the organization's requirements.
What needs improvement?
The product could be easier to set up on the cloud.
For how long have I used the solution?
We have been using Tenable Vulnerability Management for three years.
What do I think about the stability of the solution?
I rate the platform's stability an eight out of ten. Once, a few of our subsidiaries complained that channel usage in the environment was consuming bandwidth.
What do I think about the scalability of the solution?
We have five admins using Tenable Vulnerability Management in our organization. I rate the product’s scalability a seven out of ten. It has many features, and it is complicated to train someone on how to use Tenable. You have to schedule a session every day for almost two weeks for it.
How are customer service and support?
It was challenging to contact the technical support team earlier. However, we have found the right contact and can reach out to them easily.'
Which solution did I use previously and why did I switch?
I have used open-source applications before.
How was the initial setup?
The product is complicated to set up on AWS. However, it is easy to implement on-premises. It involves discovering IP addresses and schedule scanning. It requires acquiring some knowledge about the process to familiarize yourself with the AWS environment. We have to complete the setup for the whole environment. The deployment for a vast environment involves migrating a lot of data from on-premise to the cloud.
What about the implementation team?
We execute the implementation for most of the tools in-house. We take help from third-party vendors for the rest of it.
What other advice do I have?
I rate Tenable Vulnerability Management a nine out of ten. I advise you to choose Tenable.iO as it is a cloud-based solution.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Information Security Analyst at EastNets Holding Ltd.
A customizable solution that helps to scan environment
Pros and Cons
- "You can customize each point in new scans."
- "I don't recommend Tenable.io Vulnerability Management for web scanning"
What is our primary use case?
We use the solution to scan our environment, ServicePRO.
What is most valuable?
You can customize each point in new scans.
What needs improvement?
I don't recommend Tenable.io Vulnerability Management for web scanning.
For how long have I used the solution?
I have been working with the product for two years.
What do I think about the stability of the solution?
Tenable.io Vulnerability Management is stable.
What do I think about the scalability of the solution?
We have seven users for the product.
How are customer service and support?
My colleagues say that the tech support team is very responsive and helpful.
How was the initial setup?
Tenable.io Vulnerability Management's installation is easy. You just need to access the credentials for it.
What was our ROI?
We have not seen ROI with the product's use.
What other advice do I have?
I would rate the product a ten out of ten. You need to be specific with each step while using Tenable.io Vulnerability Management.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
A stable and user-friendly solution that is easy to setup
Pros and Cons
- "The solution is quite friendly."
- "Users get confused between VPR and CVSS ratings."
What is most valuable?
The solution is quite friendly.
What needs improvement?
Users get confused between VPR and CVSS ratings.
What do I think about the stability of the solution?
I would rate the tool's stability an eight out of ten.
What do I think about the scalability of the solution?
I would rate the solution's scalability an eight out of ten. We have around 1000 users for the product. We plan to increase the tool's usage in the future.
Which solution did I use previously and why did I switch?
I have used Nessus before Tenable. We switched to Tenable since it covered the problem for us.
How was the initial setup?
The product's setup is very easy and the deployment took six months to complete.
What about the implementation team?
We relied on a third-party vendor to complete the tool's deployment.
What other advice do I have?
The tool is easy to use and user-friendly and I would rate it an eight out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Cyber Security Associate at a consultancy with 10,001+ employees
Reliable with good dashboards and customizable templates
Pros and Cons
- "The initial setup is pretty straightforward."
- "They need to have more dependable and faster support."
What is our primary use case?
I primarily use the solution in order to scan assets for our clients.
What is most valuable?
It's very reliable and is a dependable solution.
The product offers multiple customizable templates. They've released new templates for template scanning. It makes everything a lot easier.
The dashboards are very helpful. They are also quite customizable.
It's stable.
The solution can scale.
The initial setup is pretty straightforward.
What needs improvement?
They need to have more dependable and faster support.
We'd like them to add more features surrounding the filtering of vulnerabilities. My understanding is that they are working on this already.
For how long have I used the solution?
I've been using the solution for almost two years.
What do I think about the stability of the solution?
The solution is stable. I'd rate it eight out nine out of ten. It is reliable. The solution doesn't crash or freeze. There are no bugs or glitches.
What do I think about the scalability of the solution?
The solution can scale well. I'd rate it eight out of ten.
We have about 13,000 to 15,000 assets.
How are customer service and support?
Support is okay. However, we've had issues with them. I've had difficulties raising cases. They need to be more responsive and need to get back to us faster.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial setup is easy. I've had no issues with the setup process.
What's my experience with pricing, setup cost, and licensing?
I'm not sure what the pricing is. I don't handle licensing.
Which other solutions did I evaluate?
Last year we evaluated it with other solutions. We were looking for a new or additional product to extend our expertise beyond Tenable. We did look into Qualys, among others.
What other advice do I have?
I'd rate the solution nine out of ten. I'm happy with its capabilities.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Executive Director at Platview Technologies
Satisfies the requirement for vulnerability assessments and has a comprehensive database
Pros and Cons
- "The ease of use in terms of scanning assets is valuable."
- "The ease of use in terms of scanning assets is valuable, and it has a diverse checklist when it comes to vulnerability databases."
- "More flexibility is required compared to other solutions."
- "The response times from the customer service and support team could be improved."
What is our primary use case?
Our primary use case for this solution is to satisfy the requirement for vulnerability assessments regarding internal assets, CPI assets and web applications. We deploy the solution on private cloud.
What is most valuable?
The ease of use in terms of scanning assets is valuable, and it has a diverse checklist when it comes to vulnerability databases. Hence, it has a comprehensive database for exploits and vulnerabilities, which is why we continue using it.
What needs improvement?
The response times from the customer service and support team could be improved. Additionally, the pricing could be better.
For how long have I used the solution?
We have been using the solution for approximately four years.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
The solution is scalable, and we currently have 15 users utilizing it.
How are customer service and support?
The response times of customer service and support can be faster. I rate them a six out of ten.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
We previously used different solutions but chose to switch because of the flexibility regarding cloud.
How was the initial setup?
The initial setup is straightforward, and it took a couple of hours.
What about the implementation team?
We implemented the solution in-house.
What's my experience with pricing, setup cost, and licensing?
Licensing is approximately $6,000 annually.
What other advice do I have?
I rate the solution an eight out of ten. The solution is good, but pricing, support and flexibility can be improved.
Disclosure: My company has a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Tenable Vulnerability Management Report and get advice and tips from experienced pros
sharing their opinions.
Updated: May 2026
Popular Comparisons
Microsoft Defender for Cloud
Checkmarx One
Zafran Security
TrendAI Vision One – Cloud Security
Orca Security
Tenable Nessus
Tenable Security Center
Buyer's Guide
Download our free Tenable Vulnerability Management Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Can you recommend API for Tenable Connector into ServiceNow
- What's the difference between Tenable Nessus and Tenable.io Vulnerability Management?
- Which one to buy out of the following products: Tenable SC, Tenable.io, Tenable.ep or Tenable.ad?
- What are the differences between Tenable.sc and Tenable.io?
- How inadvisable is it to use a single vulnerability analysis tool?
- What are the benefits of continuous scanning for vulnerability management?
- When evaluating Vulnerability Management, what aspect do you think is the most important to look for?
- What is a more effective approach to cyber defense: risk-based vulnerability management or vulnerability assessment?
- What are the main KPIs that need to be implemented to have better posture in vulnerability projects?
- Which is the best vulnerability scanner tool?




















