Cisco Vulnerability Management (formerly Kenna.VM) Reviews & Product Details

It shows easily the vulnerabilities in my system, so I can take actions really quick Review collected by and hosted on G2.com.

Sometimes I need to research what to do. Review collected by and hosted on G2.com.

It makes the process of identifying which vulnerabilities to focus remediation efforts on very easy through their tailored risk rating score. As it also displays known fixes, it makes the process of involving relevant stakeholders and communicating what steps need to be taken, very efficient. Review collected by and hosted on G2.com.

There is a certain lack of attention to feature requests that would greatly benefit the platform. Their documentation is also slightly outdated, however, they are fast responding to updating it when issues are brought to their attention. Review collected by and hosted on G2.com.

The vulnerability management module which has the risk score metrics is well aligned to what the company is trying to achieve with regard to the triaging of their security vulnerability. Review collected by and hosted on G2.com.

The application security side of the Kenna house is still in maturity level 1 with connectors not working as expected. Given the advanced modelling of the VM module would have liked the app sec side to be aligned to the industry standards as well. Review collected by and hosted on G2.com.

Vulnerabilities are categorized in severity. Review collected by and hosted on G2.com.

It mostly shows False positives or the vulnerabilities are already superseded and still showing as vulnerable. Review collected by and hosted on G2.com.

Rest APIs Documentation. Kenna's Security analysis is very good. Review collected by and hosted on G2.com.

Overall UI and usability. I wish if they could improve rest apis further, more automation and integration friendly Review collected by and hosted on G2.com.

I do like the interface and the enrichment features it has over other vulnerability systems. It factors in things like CVE, CVSS, etc, but if it's not external facing, it adjusts the score down and takes other factors into account. That's really nice. Review collected by and hosted on G2.com.

Little bit of a learning curve and some setup work to get the connectors/integrations working, but other than that, it's a pretty slick system. Review collected by and hosted on G2.com.

Consistency in monitoring is extremely important. Review collected by and hosted on G2.com.

Need to be able to drop old vulnerabilities quicker & easier when they are no longer being detected. Review collected by and hosted on G2.com.

I like the vulnerability side of the house for Kenna as it has good filters, and the data modeling is pretty well built, especially about the mapping it does with the source and target attributes. The filters make life very easy for people trying to get a feel of their risk meter. Review collected by and hosted on G2.com.

There is a lot of improvements that need to be made for the app sec side of Kenna. There are hardly any filters to visualize the data, and the data modeling is incorrect. The connectors don't work as expected. So there is a lot of corrections that need to be made for this module. I'm not too fond of the app sec module. If we can have the data modeling of app sec as the vulnerability side of the house that would be great. Review collected by and hosted on G2.com.

I like the comprehensive dashboard, which gives a detailed report of all the features. Review collected by and hosted on G2.com.

I just started using it and still experimenting with its different features, and till now, I have liked everything. Review collected by and hosted on G2.com.

As a company, we used to use spreadsheet and sharepoint methods to handle our threat detection and remediation processes. Moving to Kenna was beneficial in so many ways: 1. we ditched the awful spreadsheets and annoying sharepoint web forms, 2. we had a fast and efficient way to filter and only see our department's devices and their threat ratings. 3. I love that I can flip from tab to tab to see specific and actionable information on what needs to be done to remediate and cuts down on my team having to research the CVE and how to address it. Needless to say I spend less time now than I did before on these tasks but feel a whole lot more secure. Review collected by and hosted on G2.com.

Recently my Asset filter list is replete with tags and is making it hard for me to just see my departmental tags, this is an inconvenience and not a deal breaker. I will need to see how to make sure mine appear at the top of the asset filter tag list. Review collected by and hosted on G2.com.