I appreciate the ability to validate vulnerabilities, including those that show up in software dependencies—for example, embedded Java components within Control-M Agent or Veritas. Review collected by and hosted on G2.com.

To accomplish the assessment correctly, sometimes we need to enable the option "Perform scan with thorough checks". This can impact servers that are running unsupported software. Review collected by and hosted on G2.com.

The VM module is undoubtedly very feature-rich, with a vast array of plugins, and the R&D team is extremely quick to implement plugins for new CVEs. However, the biggest advantage is the accessibility and efficiency of the technical support, which is undoubtedly a huge differentiator. Review collected by and hosted on G2.com.

A downside is the occurrence of false positives and/or false negatives in unauthenticated scans. I realize this limitation is not unique to Tenable VM, but I believe ways could be implemented to improve the confidence level of certain checks—especially those involving the UDP protocol. Review collected by and hosted on G2.com.

I like Tenable Vulnerability Management's clear dashboards and precise information, which are essential for security analysts and application teams. The user-friendly GUI makes it accessible even for those with limited hands-on experience, supported by helpful detailed analysis and impact information on identified asset vulnerabilities. I also appreciate that it's easy to integrate with different environments like cloud and on-premise setups, making it more adaptable. Additionally, the accurate and timely vulnerability information from Tenable feeds is valuable for security analysis and staying proactive on recent threats. The setup process is simple and doesn't require extensive experience, which I find more straightforward than other products I've used, like Qualys or Rapid7. Overall, Tenable stands out as user-friendly and efficient for integration and configuration tasks. Review collected by and hosted on G2.com.

The support response time could be improved, especially for smaller organizations. When I worked with a large organization as a gold partner, the support was quick and accurate. But now, working with a smaller organization, there's a delay in support. The team also tends to avoid calls, preferring email support, which can be slower. Direct interaction over calls, even with smaller customers, would be more efficient for quicker support. Review collected by and hosted on G2.com.

What I like most about Tenable Vulnerability Management is its comprehensive vulnerability visibility, accurate risk prioritization, and centralized management capabilities. The dashboards and reporting make it easy to track vulnerabilities, identify critical risks, monitor remediation progress, and provide clear insights to stakeholders. Its scanning and asset management capabilities also help streamline the overall vulnerability management process. Review collected by and hosted on G2.com.

The report-sharing functionality needs improvement. The option to automatically share the report with users after scan completion does not always work as expected, which can require manual intervention to distribute reports and may delay communication with stakeholders. Review collected by and hosted on G2.com.

We have started to Tenable One alongside the Web Application vulnerability management. Tenable One provides a good overview and both works well. Review collected by and hosted on G2.com.

Tenable Lumin has been deprecated and replaced. The new capabilities are great but tbh Lumin was offering very useful statistics which I miss. Review collected by and hosted on G2.com.

I find Tenable Vulnerability Management reliable and easy to use for managing vulnerabilities day to day. It helps us maintain better visibility across our environment and gives us a structured approach to identifying, prioritizing, and managing security vulnerabilities. It also reduces the need for manual assessment and helps us determine which vulnerabilities need immediate attention. The initial setup was relatively straightforward. Getting familiar with the platform and configuring scans took some time, but the documentation and available features made the process manageable. Review collected by and hosted on G2.com.

I think the cloud services could perform better, especially when working with large amounts of vulnerability data. I’d like dashboards and reports to be more customizable and easier to navigate, better visibility into misconfigurations, real-time risk updates for patch management, patch management directly in the VM, and more detailed remediation guidance. Getting familiar with the platform and configuring scans took some time, though the setup was manageable. Review collected by and hosted on G2.com.

I really like the integrations of Tenable Vulnerability Management and its user-friendly graphical interface. Additionally, the organization of information and the way modules are presented are aspects I value greatly. I find the configuration quite intuitive thanks to the documentation. Review collected by and hosted on G2.com.

The issue with pagination in tables, especially when selecting assets for remediation, doesn't work so well. I would also like it to be easier to select in the findings. Review collected by and hosted on G2.com.

I like how easy it is to manage vulnerabilities with Tenable Vulnerability Management and how simple it is to identify exposed vulnerabilities on assets. When possible, HEXA IA is great for analysis, even if the scan hasn't been performed yet. The initial setup is very simple if you have the basic tools, and we recommend it for ease of management. Review collected by and hosted on G2.com.

Sometimes I can't validate the information about the remediated status of a vulnerability, nor consult the basic history and status of the asset. Review collected by and hosted on G2.com.

The API that brings the Data from the platform since it give us the possibility to interact with the data performing deep data analysis

The performance is excellent with more than 100k assets and still having excellent performance.

The ROI is brilliant since we are mitigating risk based on the Tenable findings and any gaps are fullfilled by the documentation or Tenable Elite Support.

The UI/UX interface is excellent, however it can improve for non-technical profiles to better interact with the data.

The IA is still under development, and i think it's covering the gap mentioned before where non-technical people can just ask the IA for specific data queries to analyze. But, it still need a lot to improve this subject. Review collected by and hosted on G2.com.

The less useful thing that it have is the scan exceptions since the schedule for non scan assets and schedule to not scan ports aren't working good, it's needed to create a exception forever and all the ports.

The main dashboard can also improve, since it could have customer context to show data.

SLA for vulnerabilities isn't customizable (Not with very specific context) Review collected by and hosted on G2.com.

UI looks pretty logic. API accounts for integration are working properly. Tenable AI is not useful, if you are not providing info about asset criticality. Most of our issues reported to Tenable Support are handling properly, but sometimes they have a problem to understand our problem. Rating a value of a platform compare to money that you need to spend on it it's not ideal. Review collected by and hosted on G2.com.

Performance issues:

- access scan results

- more combined query in assets and findings view

- multiple agents in sensors tab

- failure in random days during API account calls

Pricing, especially if you are thinking about Web App Scan module. Review collected by and hosted on G2.com.