Automox vs. Tenable Nessus

Automox is well-suited for managing workstations but lacks flexibility for server environments.
It excels in scenarios where systems may not regularly connect to the corporate network but have internet access, ensuring devices can still check in and receive timely patches. This provides organizations with confidence in maintaining patch compliance across remote endpoints.
However, effective use of Automox requires staff who are proficient in PowerShell scripting. The platform has limited native support for third-party applications, often requiring custom worklets to manage software updates. It performs best in environments that primarily rely on widely used, off-the-shelf software.

Incentivized

Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.

Incentivized

• Shows applications installed on a specific asset
• Able to push policies and updates remotely , creating policies is easy.
• Keep track of compliant devices and when is the last time they have connected to the servers
• All the great information provided within one single device

Incentivized

• Shows you how to fix certain vulnerabilities and the commands to run.
• Gives you the CVEs that the vulnerabilities are matched to.
• Easy to understand the vulnerabilities list, giving reasons why the issues need to be patched or fixed.

• I was not aware that the starting default policies are inactive until I activate them. That would have been a nice pop up to see on first login.
• I think the pricing for integrating 3rd party apps could be more competitive. The base tier is so affordable, the jump up is a bit high.
• I'd like the option to remember my device and not have to use 2FA on every single login to the dashboard from the same device.
• I looked, and cannot find, but would appreciate an iOS mobile app of the dashboard to monitor and adminstrate from my mobile device.

Incentivized

• Could use an upgrade within reports.
• Scans can take a long time to complete. Have to break them down in small sections.

Incentivized

This is a software that just works. Once configured its a set and forget kind of tool that keeps things up to date and alerts me if something is wrong. I was able to work through an expansion project to deploy an additional 500 devices in almost no time and create a robust self-patching environment.

Incentivized

Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.

Incentivized

It is super simple to set up and deploy, Maintaining it also easy as pie. It gives great detailed information daily on patches that succeed and ones that fail as well. with remote, patching, scanning, and monitoring all in one pane it has saved us money hand over fist with the tools we no longer need to have for our organization.

Incentivized

Tenable Nessus is a great product and provides a lot of value, but it is difficult to set up and use and the amount of data it generates can be overwhelming. It does help us prioritize based on the severity of the detection, however there are sometimes mitigating factors that we have implemented that Nessus does not account for, which causes lots of noise in the reports.

Incentivized

1. Simplicity and Ease of Use 2. Cross-Platform Support 3. Powerful Automation with Worklets 4. Real-Time Visibility and Control 5. Fast and Reliable Cloud-Based Updates 6. Strong Security Focus

Incentivized

I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.

Incentivized

Implementing Automox successfully starts with a clear strategy for organizing and grouping devices based on operating systems, environments, or business criticality. This ensures that patching and configuration policies can be applied with precision. A phased rollout approach is essential—beginning with a pilot group allows teams to test patching schedules, reboot behaviors, and custom Worklets before scaling across the organization. Leveraging Worklets from the start can significantly boost automation by enforcing security baselines and performing routine system tasks. Integration with existing SOC tools, such as SIEMs, enhances visibility and response time by correlating patch compliance with threat intelligence. Additionally, aligning patching schedules with operational downtimes minimizes disruptions, and consistent monitoring and reporting helps maintain compliance and prepare for audits. Overall, Automox offers a streamlined and effective solution, but its true value is unlocked through thoughtful planning, testing, and integration with existing IT and security workflows.

Incentivized

We felt that Automox provided us with the functionality our MSP offered, including OS and device patching, as well as remote control capabilities, but in a better and more manageable way. We also felt the usability of the tool gave us the ability to be effective in our way of working, as well as integrating with Rapid7 was a massive benefit for us.

Incentivized

Ease of deployment and use even for junior analysts, strong plugin support, and up-to-date CVE coverage, cost-effective licensing, especially for mid-size companies, and seamless integration with the SIEM tool. Overall, Nessus hit the right balance between functionality, performance, and total cost of ownership for our needs and usability.

• Being a start up, we have pivoted our strategies a number of times. The pay as you go model has worked very well for us, and has prevented us from overprovisioning
• The time saved pulling reports to provide to auditors has been well worth our small spend on the solution
• We have no need to maintain a scanning tool or invest in hardware thanks to the SaaS nature of Automox

Incentivized

• It has helped identify security flaws in our infrastructure that has helped better secure our client's data. It did so quickly and efficiently so I was able to move on to other tasks.

Incentivized