Spotlight vs. Tenable Nessus

Spotlight is great when you need a tool to give a quick look at a SQL server as a whole. It gives you the ability to see a lot of things, which can be vital in diagnosing problems or identifying stressors. Less great is the open-end of some of the diagnoses it makes, and things it identifies as "problems" (unless you love users coming to you and saying something like "Spotlight says there's a problem with our page latch!!!").

Incentivized

Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.

Incentivized

• The screen is color-coded, so when Red or Orange is displayed you are able to drill down into that setting and figure out what is going on.
• This tool also integrates with the OEM agents which will also have implemented.
• Spotlight also works great without RAC databases, able to view at the cluster level or drill down to instances and VM's.

Incentivized

• Shows you how to fix certain vulnerabilities and the commands to run.
• Gives you the CVEs that the vulnerabilities are matched to.
• Easy to understand the vulnerabilities list, giving reasons why the issues need to be patched or fixed.

• Cash Flow analysis could be better, there are many different scenarios to calculate the cash flow but flexibility is not great.
• Incorporating machine learning algorithms for predictive analytics could enhance forecasting accuracy

Incentivized

• Could use an upgrade within reports.
• Scans can take a long time to complete. Have to break them down in small sections.

Incentivized

Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.

Incentivized

the platform offers a clean, easy to use interface. You can customize reports and dashboard. Integration is also pretty good, you can integrate to Xero, QBO and MYOB and excel spreadsheets. It also offers very broad supporting documents and webinars. There are only two downside of Spotlight; learning curve (it could be a bit difficult at the beginning to learn the system) and price point (For small businesses, Spotlight Reporting can be seen as relatively expensive compared to other reporting tools)

Incentivized

Tenable Nessus is a great product and provides a lot of value, but it is difficult to set up and use and the amount of data it generates can be overwhelming. It does help us prioritize based on the severity of the detection, however there are sometimes mitigating factors that we have implemented that Nessus does not account for, which causes lots of noise in the reports.

Incentivized

Though our support needs have been minimal, we have gotten good responses when we have needed it.

Incentivized

I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.

Incentivized

Spotlight is more usable, better at meeting requirements. Integration with Xero is one of the strengths (as others integrate too but Spotlight seems better connection). We also like the way group consolidation work in Spotlight. If your focus is on comprehensive, flexible, and visually rich reports and dashboards for multiple clients or entities, Spotlight is a clear choice.

Incentivized

Ease of deployment and use even for junior analysts, strong plugin support, and up-to-date CVE coverage, cost-effective licensing, especially for mid-size companies, and seamless integration with the SIEM tool. Overall, Nessus hit the right balance between functionality, performance, and total cost of ownership for our needs and usability.

• It had a positive impact in two main areas. First, it was easy for the DBA team to configure it to watch and alert on the most important instances. And second, it was very easy to provide clients read-only access to the dashboard so they could watch their servers as well, i.e. they weren't always pestering us for current status.

Incentivized

• It has helped identify security flaws in our infrastructure that has helped better secure our client's data. It did so quickly and efficiently so I was able to move on to other tasks.

Incentivized