Heimdal Patch and Asset Management vs. Tenable Vulnerability Management

Heimdal Patch and Asset Management is amazing at what it does - keeping all servers and endpoints patched and up to date. It removes the hassle out of manually checking software on each server and endpoint, and frees up the IT team's time to only have to interact with software that won't update automatically.

Incentivized

Tenable.io is a cost effective Internal and External scanner. The Internal scanner came with a .ova, so it was very simple and quick to deploy it into our ESXi environment. It has a cloud-based dashboard for management and the internal scanner is configured to auto-update from Tenable.io. The license came with 4 External PCI scans (with remediation) a year.

Incentivized

• All updates are delivered across all devices, whether domained or not.
• Ability to add applications to patching regime is excellent.
• Single pain of glass portal for all modules.
• If needed (rarely), support has been first class.

Incentivized

• Wide range of capabilities that can be customized to fit each user's environment and needs
• Provides high-quality data and insights into detected vulnerabilities
• Great customer support

Incentivized

• Interface could be more user friendly but when you know how it works its allright
• Easier way to quickly see what updates are installed on what machines

Incentivized

• Configuration is not always intuitive, but the comprehensive training and documentation comes to the rescue.
• The mix of classic and beta UIs currently is confusing and we find the classic UI is actually better.

Incentivized

We like to renew tenable each year we have had it so far.

Incentivized

Overall it is good, it took a little while to understand it and figure things out but once you have a good grasp on it then, it is very good.

Incentivized

Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)

Incentivized

We assessed both ManageEngine and Qualys (specifically their patch management solution) against Heimdal Patch and Asset Management. Qualys was an outlier in terms of cost and felt complex for setup at the time (I believe this has now improved) when compared to both alternate solutions. When considering our patch solution we also wanted a product that could integrate additional features (Spam filtering, endpoint protection, remote desktop support) under "a pane of glass". Heimdal Patch and Asset Management seemed to cover this off within the best interface at a competitive price for each additional solution.

Incentivized

I think Tenable and Qualys have a lot of similarities, I continue to go back to Tenable because of my familiarity and comfort level with it. I've also used a company called SecurityMetrics which has vulnerability scanning included but it is not as comprehensive as Tenable.

Incentivized

• More Support necessary than without automated patching
• ROI is hard to determine as there was no 3rd party exploit in the time we have used Heimdal Patch and Asset Management

Incentivized

• We're able to mitigate over 90% of our vulnerability risk without too much effort. It helps find where automated patching fails and we can plan a fix from the findings.
• A side effect of our scanning reveals new devices on our network that aren't cleared to be.

Incentivized