Microsoft Defender for Business vs. Tenable Vulnerability Management

Microsoft Defender for Business is well suited for any size organization using the Microsoft 365 Suite. As an included feature in the mid and upper tiers of the 365 suites, it can quickly address antivirus protection for any sized company. It's compliance and security dashboards can help guide sole proprietorship owners in better understanding their security standing. The software also scales to give mid-sized and enterprise originations the in-depth information needed for compliance.

Incentivized

Tenable.io is a cost effective Internal and External scanner. The Internal scanner came with a .ova, so it was very simple and quick to deploy it into our ESXi environment. It has a cloud-based dashboard for management and the internal scanner is configured to auto-update from Tenable.io. The license came with 4 External PCI scans (with remediation) a year.

Incentivized

• Monitors the health of endpoints
• Protects endpoints with antivirus
• Allows for policy configurations that can be deployed to endpoints

Incentivized

• Wide range of capabilities that can be customized to fit each user's environment and needs
• Provides high-quality data and insights into detected vulnerabilities
• Great customer support

Incentivized

• Finding blocked programs in the UI is not intuitive if the alert message is dismissed.
• The admin portal changes often with features coming and going.
• Admin portal interface is cluttered and sometimes not intuitive.

Incentivized

• Configuration is not always intuitive, but the comprehensive training and documentation comes to the rescue.
• The mix of classic and beta UIs currently is confusing and we find the classic UI is actually better.

Incentivized

So far we have found no alternative that would overall offer us more than we are getting from Microsoft Defender for Business!

Incentivized

We like to renew tenable each year we have had it so far.

Incentivized

Microsoft Defender for Business is user friendly but requires some IT knowledge to adapt to its full potential. Microsoft 365 business will likely be more adaptable and have less of a learning curve than new users when configuring settings or security policies. Overall, I would say that strengths outweigh weaknesses and the unknowns can be learned

Incentivized

Overall it is good, it took a little while to understand it and figure things out but once you have a good grasp on it then, it is very good.

Incentivized

Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)

Incentivized

Microsoft Defender for Business, I believe, is a "light" version of Microsoft Defender for Endpoint. While they both have some of the same features, Microsoft Defender for Business has far less, and the more complex you want to get with your configurations, you may need to dip your toe into the InTune Admin Center to deploy certain policies.

Incentivized

I think Tenable and Qualys have a lot of similarities, I continue to go back to Tenable because of my familiarity and comfort level with it. I've also used a company called SecurityMetrics which has vulnerability scanning included but it is not as comprehensive as Tenable.

Incentivized

• Improved cybersecurity
• Learning curve
• Resource consumption

Incentivized

• We're able to mitigate over 90% of our vulnerability risk without too much effort. It helps find where automated patching fails and we can plan a fix from the findings.
• A side effect of our scanning reveals new devices on our network that aren't cleared to be.

Incentivized