Heimdal Patch and Asset Management vs. Tenable Nessus

Heimdal Patch and Asset Management is amazing at what it does - keeping all servers and endpoints patched and up to date. It removes the hassle out of manually checking software on each server and endpoint, and frees up the IT team's time to only have to interact with software that won't update automatically.

Incentivized

Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.

Incentivized

• All updates are delivered across all devices, whether domained or not.
• Ability to add applications to patching regime is excellent.
• Single pain of glass portal for all modules.
• If needed (rarely), support has been first class.

Incentivized

• Shows you how to fix certain vulnerabilities and the commands to run.
• Gives you the CVEs that the vulnerabilities are matched to.
• Easy to understand the vulnerabilities list, giving reasons why the issues need to be patched or fixed.

• Interface could be more user friendly but when you know how it works its allright
• Easier way to quickly see what updates are installed on what machines

Incentivized

• Could use an upgrade within reports.
• Scans can take a long time to complete. Have to break them down in small sections.

Incentivized

Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.

Incentivized

Tenable Nessus is a great product and provides a lot of value, but it is difficult to set up and use and the amount of data it generates can be overwhelming. It does help us prioritize based on the severity of the detection, however there are sometimes mitigating factors that we have implemented that Nessus does not account for, which causes lots of noise in the reports.

Incentivized

I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.

Incentivized

We assessed both ManageEngine and Qualys (specifically their patch management solution) against Heimdal Patch and Asset Management. Qualys was an outlier in terms of cost and felt complex for setup at the time (I believe this has now improved) when compared to both alternate solutions. When considering our patch solution we also wanted a product that could integrate additional features (Spam filtering, endpoint protection, remote desktop support) under "a pane of glass". Heimdal Patch and Asset Management seemed to cover this off within the best interface at a competitive price for each additional solution.

Incentivized

Ease of deployment and use even for junior analysts, strong plugin support, and up-to-date CVE coverage, cost-effective licensing, especially for mid-size companies, and seamless integration with the SIEM tool. Overall, Nessus hit the right balance between functionality, performance, and total cost of ownership for our needs and usability.

• More Support necessary than without automated patching
• ROI is hard to determine as there was no 3rd party exploit in the time we have used Heimdal Patch and Asset Management

Incentivized

• It has helped identify security flaws in our infrastructure that has helped better secure our client's data. It did so quickly and efficiently so I was able to move on to other tasks.

Incentivized