Digital Shadows vs. Tenable Vulnerability Management

DS is fantastic for big and large-medium companies, it has many very featured functions and works very well. It's a little bit expensive for small and little-medium companies.

Incentivized

Tenable.io is a cost effective Internal and External scanner. The Internal scanner came with a .ova, so it was very simple and quick to deploy it into our ESXi environment. It has a cloud-based dashboard for management and the internal scanner is configured to auto-update from Tenable.io. The license came with 4 External PCI scans (with remediation) a year.

Incentivized

• We found company emails used for personal uses.
• We found internal documents in deep web.
• We found news and information about the company managers on social media not delivered by the company.

Incentivized

• Wide range of capabilities that can be customized to fit each user's environment and needs
• Provides high-quality data and insights into detected vulnerabilities
• Great customer support

Incentivized

• I'd like to have still more features for searching on social media.
• I'd like to have a better interface for configuration.
• It's expensive for middle and small companies, I'd like to have a reduced-features version for them.

Incentivized

• Configuration is not always intuitive, but the comprehensive training and documentation comes to the rescue.
• The mix of classic and beta UIs currently is confusing and we find the classic UI is actually better.

Incentivized

Solved the problems of my customers and permitted to clearly demonstrate these problems to management.

Incentivized

We like to renew tenable each year we have had it so far.

Incentivized

It's very easy to use, also non-technical users can understand the information to use for search and results, initial configuration is less easy to configure but just a little.

Incentivized

Overall it is good, it took a little while to understand it and figure things out but once you have a good grasp on it then, it is very good.

Incentivized

They are very available and competent, in addition, they used people with a good knowledge of the Italian language that helped very much, especially with the first customer.

Incentivized

Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)

Incentivized

As I said: ease of use, scanningg of deep web and social media, results easy to understand and use.

Incentivized

The other product didn't have searches on Social Media.

Incentivized

I think Tenable and Qualys have a lot of similarities, I continue to go back to Tenable because of my familiarity and comfort level with it. I've also used a company called SecurityMetrics which has vulnerability scanning included but it is not as comprehensive as Tenable.

Incentivized

• DS gave more visibility on the company cyber exposure.
• Results of DS searches helped to solve security holes in people's behaviour.
• Company management reached more awareness about company cyber exposure.

Incentivized

• We're able to mitigate over 90% of our vulnerability risk without too much effort. It helps find where automated patching fails and we can plan a fix from the findings.
• A side effect of our scanning reveals new devices on our network that aren't cleared to be.

Incentivized