IBM Security Verify Access vs Tenable Cloud Security comparison

IBM Security Verify Access vs. Tenable Cloud Security

Download the complete report

Helped 869,513 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

IBM Security Verify Access

Ranking in Identity and Access Management as a Service (IDaaS) (IAMaaS)

14th

Average Rating

7.8

Reviews Sentiment

6.4

Number of Reviews

Ranking in other categories

Single Sign-On (SSO) (13th), Identity Management (IM) (21st), Access Management (14th)

Tenable Cloud Security

Ranking in Identity and Access Management as a Service (IDaaS) (IAMaaS)

12th

Average Rating

8.4

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Container Security (24th), Cloud Workload Protection Platforms (CWPP) (11th), Cloud Security Posture Management (CSPM) (17th), Cloud-Native Application Protection Platforms (CNAPP) (13th), Cloud Infrastructure Entitlement Management (CIEM) (4th)

Mindshare comparison

As of October 2025, in the Identity and Access Management as a Service (IDaaS) (IAMaaS) category, the mindshare of IBM Security Verify Access is 2.4%, up from 1.7% compared to the previous year. The mindshare of Tenable Cloud Security is 0.8%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Identity and Access Management as a Service (IDaaS) (IAMaaS) Market Share Distribution
Product	Market Share (%)
Tenable Cloud Security	0.8%
IBM Security Verify Access	2.4%
Other	96.8%

Identity and Access Management as a Service (IDaaS) (IAMaaS)

Featured Reviews

Ateeq Rehman

Unit Head System Implementor at Allied Bank Limited

Has improved secure user access while managing development through multiple technologies

I have already explained this in my previous call; I don't handle financial terms and commercials. Pricing is generally managed by functional teams and management looking after licensing matters. In Pakistan, vendors such as Oracle and IBM manage account relationships with clients and have tailored pricing models, so I do not have sufficient insights into that aspect.IBM Security Verify Access installation process is not straightforward; it requires underlying specialized knowledge upon which the IBM products are based. The complexity and scalability of the architecture necessitate in-depth technical knowledge and understanding of the system. Thus, installation is not as simple as clicking through; it requires extensive configuration of the underlying application servers, such as IBM WebSphere, where these products are deployed and configured.

Read full review

DragosCernat

Information Security Architect at WSP

Has significantly improved proactive monitoring through automated asset discovery and seamless integration with cloud environments

Making the system smarter would be beneficial. Adding modules for integration with AWS and Azure would be helpful. Adding capabilities for the scanner to automatically pick up changes and add assets automatically would be valuable. When discussing a big company, it is mandatory to have tools that will assist us rather than waiting for manual input to add hosts. Adding assets manually is prone to mistakes. Humans might forget to add an asset or make errors when adding multiple assets. Taking the human element out of the context and making it more streamlined is the future for security. The human should be involved where expertise is needed, such as analysis and decision-making. Currently, with resource constraints, we need tools to collect and aggregate data, eliminate false positives as much as possible, and present relevant information to employees for action.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution has powerful authentification and authorization. It offers a good way to increase security."

"From the integration point of view, it supports SAML, OIDC, and OAuth. For legacy applications that don't have support for SAML and other new protocols, it provides single sign-on access to end-users. From the integration compatibility point of view, it is highly capable."

"IBM Security Verify Access is providing a secure way of handling the user login journey, and secure user authentication is fully managed by ISAM or ISVA."

"IBM Security Verify Access, formerly known as ISAM, IBM Security Access Manager, now renamed to ISVA, integrates with central directory services for our organization and provides user management functionality."

"I have found this solution to be really practical and when a user wants to log in, it is effortless and runs smooth."

"The most valuable feature of IBM Security Access Manager, at least for my company, is multi-factor authentication. That's the only feature my company is using. The solution works well and has no glitches. IBM Security Access Manager is a very good solution, so my company is still using it."

"The tool provides a password vault, single sign-on, and multifactor authentication. It offers various authentication methods like fingerprint integration, one-time passwords, or tokens sent via email or SMS. This ensures secure access to your accounts by providing multiple authentication options."

"It's a good solution for identification and access management."

More IBM Security Verify Access pros

"The analytical and reporting capabilities are pretty straightforward and show every transaction and major attempt to attack the application in the cloud."

"Scanning and reporting are the most valuable features of Tenable Cloud Security"

"Element is precisely what we needed for close to real-time external surface monitoring, and the automatic integration capabilities, particularly with DNS, Azure, and AWS, are extremely valuable."

"The key benefit lies in having the largest and most up-to-date database. When it comes to using any Tenable product, it excels in finding vulnerabilities and providing analytics."

"Ermetic can provide super visibility for our cloud environment (we are using AWS)."

"The product's visibility and remediation work fine for me."

"Tenable Cloud Security excels in vulnerability detection, one of its strongest features. Another valuable feature is software composition analysis, which highlights and automates the detection of security flaws. Additionally, their knowledge base is excellent; if anything goes wrong, they provide clear guidance on what needs to be done to address specific vulnerabilities."

"The tool alerts us on depreciating performance or deficiencies of our web application. It helps us react on time."

More Tenable Cloud Security pros

Cons

"There are a lot of areas that can be improved, but the main area is the lack of customization. You cannot easily customize anything in the product. It is not easy to tweak the functionality. It is challenging to change the out-of-the-box functionality."

"The solution could be classified as a hilt system. There are a lot of resources being used and it is suitable for very large enterprises or the public sector."

"The user interface for users and administrators could be improved to make it easier. Automating some functions could also be beneficial."

"Configuration could be simplified for the end-user."

"IBM Security Verify Access installation process is not straightforward; it requires underlying specialized knowledge upon which the IBM products are based."

"They can improve the single sign-on configuration for OIDC and OAuth. That is not very mature in this product, and they can improve it in this particular area. OIDC is a third-party integration that we do with the cloud platforms, and OAuth is an authorization mechanism for allowing a user having an account with Google or any other provider to access an application. Organizations these days are looking for just-in-time provisioning use cases, but IBM Security Access Manager is not very mature for such use cases. There are only a few applications that can be integrated, and this is where this product is lagging. However, in terms of configuration and single sign-on mechanisms, it is a great product."

"What we'd like improved in IBM Security Access Manager is its onboarding process as it's complex, particularly when onboarding new applications. We need to be very, very careful during the onboarding. We have no issues with IBM Security Access Manager because the solution works fine, apart from the onboarding process and IBM's involvement in onboarding issues. If we need support related to the onboarding, we've noticed a pattern where support isn't available, or they don't have much experience, or we're not getting a response from them. We're facing the same issue with IBM Guardium. As we're just focusing on the multi-factor authentication feature of IBM Security Access Manager and we didn't explore any other features, we don't have additional features to suggest for the next release of the solution, but we're in discussion about exploring ID management and access management features, but those are just possibilities because right now, we're focused on exploring our domain."

More IBM Security Verify Access cons

"I do think there might be room for more integrations. This could allow for further customization and flexibility, essentially offering different functionality options to accommodate various budgets."

"In my experience, Tenable Cloud Security is not very stable."

"If Tenable Cloud Security offers a complete Cnapp solution with CWP, CIEM, and Waap security, it will be able to compete with other competitors."

"Ermetic needs to improve its security scanning. I would like to see more dynamic graphical forms."

"I have faced several bug incidents with the solution"

"I didn't find anything that wasn't useful or needed to be added."

"The product must provide more features."

"We still maintain Tenable Cloud Security but have reduced the number of licenses. We now use it occasionally to validate specific items rather than monitoring the entire surface, for which we use Element."

More Tenable Cloud Security cons

Pricing and Cost Advice

"It costs about 300K AED for a year. Its pricing is a bit on the higher end, but in comparison to other products in the market, its price is still better. There are lots of other products that are very costly."

"The product is not expensive. It depends on the number of users."

"The license and costs depend on the amount range of users you have. For just approximately 2,000 users, the price is practical and fair. However, when you have 20,000 users, it starts to become really expensive, and the discount per user is not attractive enough to go ahead and purchase."

"There is a need to opt for a subscription-based pricing model to use Tenable Cloud Security. I rate the product price an eight on a scale of one to ten, where one is low price and ten is high price."

"The tool's price is good compared to other brands. The tool's subscription is for a year."

"The tool's pricing is fair."

See which vendors are best for you

Use our free recommendation engine to learn which Identity and Access Management as a Service (IDaaS) (IAMaaS) solutions are best for your needs.

See recommendations

869,513 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

22%

Insurance Company

14%

Government

12%

Computer Software Company

13%

Government

11%

Financial Services Firm

10%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	1
Large Enterprise	5

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	2
Large Enterprise	5

Questions from the Community

What do you like most about IBM Security Access Manager?

The tool provides a password vault, single sign-on, and multifactor authentication. It offers various authentication methods like fingerprint integration, one-time passwords, or tokens sent via ema...

What needs improvement with IBM Security Access Manager?

The user interface for users and administrators could be improved to make it easier. Automating some functions could also be beneficial.

What advice do you have for others considering IBM Security Access Manager?

I rate the product an eight out of ten.

What do you like most about Tenable Cloud Security?

The solution’s vulnerability management feature has helped us identify and mitigate risks well.

What needs improvement with Tenable Cloud Security?

I think Tenable Cloud Security could be improved with more clear licensing. What I would like to see improved with licensing is how they're used in the product. The calculations of what is consider...

What is your primary use case for Tenable Cloud Security?

My main use case for Tenable Cloud Security is managing our security compliance and security posture. I use Tenable Cloud Security for managing compliance and security posture, and we rely on the c...

Oracle Access Manager vs IBM Security Verify Access

Comparisons

Compared 21% of the time

Microsoft Entra ID vs IBM Security Verify Access

Compared 14% of the time

SailPoint Identity Security Cloud vs IBM Security Verify Access

Compared 9% of the time

Okta Workforce Identity vs IBM Security Verify Access

Compared 9% of the time

IBM Cloud Identity Service vs IBM Security Verify Access

Compared 8% of the time

More IBM Security Verify Access Competitors

Wiz vs Tenable Cloud Security

Compared 18% of the time

Microsoft Defender for Cloud vs Tenable Cloud Security

Compared 10% of the time

Prisma Cloud by Palo Alto Networks vs Tenable Cloud Security

Compared 9% of the time

Tenable Vulnerability Management vs Tenable Cloud Security

Compared 8% of the time

AWS Security Hub vs Tenable Cloud Security

Compared 6% of the time

More Tenable Cloud Security Competitors

Product Reports

Identity and Access Management as a Service (IDaaS) (IAMaaS)

Download IBM Security Verify Access product report

Tenable Cloud Security

Download Tenable Cloud Security product report

Also Known As

IBM Security Verify Access (SVA), IBM Security Access Manager, ISAM

Ermetic, Ermetic Identity Governance for AWS

Overview

IBM Security Verify Access is a complete authorization and network security policy management solution. It provides end-to-end protection of resources over geographically dispersed intranets and extranets.Provides a wide range of built-in authenticators and supports external authenticators.Provides permit and deny decisions for protected resources requests in the secure domain through the authorization API.Manages secure access to private internal network-based resources by using the public Internet's broad connectivity and ease of use with a corporate firewall system.

IBM

Tenable Cloud Security is a comprehensive solution designed to help organizations secure their cloud environments across various platforms, including AWS, Azure, and Google Cloud. It offers continuous visibility, compliance management, and threat detection to ensure that cloud infrastructure and applications are protected from vulnerabilities and misconfigurations.

Tenable Cloud Security exemplifies a comprehensive Cloud-Native Application Protection Platform (CNAPP) by providing a unified solution that covers the entire cloud security lifecycle, from development to runtime. This platform is designed to address vulnerabilities, misconfigurations, threats, and compliance risks across multi-cloud environments, making it an essential tool for organizations adopting cloud-native architectures. In practice, Tenable Cloud Security integrates security into the development process through its shift-left approach, particularly with Infrastructure as Code (IaC) security. This ensures that security measures are embedded early in the development lifecycle, allowing teams to identify and mitigate vulnerabilities before they reach production. Once in production, the platform continues to provide real-time visibility into cloud environments, enabling continuous monitoring and proactive threat detection.

The solution's comprehensive protection spans various aspects of cloud security, including the identification and remediation of misconfigurations, automated compliance management, and advanced threat intelligence. By automating these processes, Tenable Cloud Security reduces the manual effort required to manage cloud security, freeing up resources for more strategic initiatives.

What are the key features of Tenable Cloud Security?

Unified Platform: Covers the entire cloud security lifecycle, from development to runtime, providing comprehensive protection.
Shift-Left Approach with IaC Security: Integrates security early in the development process, ensuring that vulnerabilities are caught and remediated before deployment.
Continuous Monitoring: Offers real-time visibility and monitoring of cloud environments, enabling proactive threat detection and response.
Automation: Streamlines security operations, reducing the need for manual intervention and increasing operational efficiency.
Comprehensive Threat and Compliance Management: Identifies and mitigates vulnerabilities, misconfigurations, and compliance risks across multi-cloud environments.

What are the benefits of using Tenable Cloud Security?

Improved Security Posture: Early detection and remediation of vulnerabilities lead to a stronger overall security posture.
Operational Efficiency: Automation reduces the workload on security teams, allowing them to focus on higher-priority tasks.
Risk Reduction: Proactively identifies and addresses risks before they impact production environments.
Simplified Compliance: Helps organizations meet and maintain compliance with industry standards, reducing the complexity and cost of audits.

Tenable Cloud Security is particularly valuable in industries with stringent regulatory requirements, such as finance, healthcare, and retail. For example, in the financial sector, it helps organizations ensure compliance with regulations like PCI-DSS while safeguarding sensitive data across cloud environments.

In summary, Tenable Cloud Security is a robust CNAPP solution that integrates security throughout the cloud lifecycle, providing comprehensive protection and operational efficiency for cloud-native environments.

Tenable

Sample Customers

POST Luxembourg

Tyler Technologies, Bilfinger, BarkBox, MongoDB, airSlate, Adama, Latch, Cloudinary, Riskified, AppsFlyer, IntelyCare, Aidoc, 42Dot, and more.

IBM Security Verify Access vs. Tenable Cloud Security