Try our new research platform with insights from 80,000+ expert users

Sucuri vs Tenable.io Web Application Scanning comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Sucuri
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
6
Ranking in other categories
Web Application Firewall (WAF) (37th), Distributed Denial-of-Service (DDoS) Protection (26th), Domain Name System (DNS) Security (23rd)
Tenable.io Web Application ...
Average Rating
7.8
Reviews Sentiment
5.8
Number of Reviews
18
Ranking in other categories
Application Security Tools (15th)
 

Mindshare comparison

Sucuri and Tenable.io Web Application Scanning aren’t in the same category and serve different purposes. Sucuri is designed for Domain Name System (DNS) Security and holds a mindshare of 1.5%, up 1.1% compared to last year.
Tenable.io Web Application Scanning, on the other hand, focuses on Application Security Tools, holds 1.4% mindshare, up 1.2% since last year.
Domain Name System (DNS) Security Market Share Distribution
ProductMarket Share (%)
Sucuri1.5%
Cisco Umbrella20.8%
Infoblox Advanced DNS Protection11.5%
Other66.2%
Domain Name System (DNS) Security
Application Security Tools Market Share Distribution
ProductMarket Share (%)
Tenable.io Web Application Scanning1.4%
SonarQube16.9%
Checkmarx One9.9%
Other71.80000000000001%
Application Security Tools
 

Featured Reviews

JS
Hardware Engineer at Ministry of Defense
A cost-effective choice for website security and informative support with issues related to CDN quality
One area where they could improve is in providing real-time support options because now you need to open a support ticket and wait for their response. It would greatly benefit customers if they implemented an online chat or messaging system for quicker assistance. I have found their Content Delivery Network service to be lacking in quality, and it could certainly be enhanced to provide better performance. I would also like to see improvements in the deployment process, as it currently takes more time than desirable. Another significant concern is that their service when your website is down, turns it into a static site. This means that if customers try to visit your site during downtime, they will see old content from the static site, which is not ideal. The CDN and tracking services are areas that need improvement, as well as addressing their bandwidth limitations.
JP
Cyber Security Architect at a comms service provider with 10,001+ employees
Centralized license management transforms asset manipulation based on functions and improves security posture
Now that the license is centralized, it's a significant feature to manipulate assets based on their functions. It provides a centralized view from end-to-end to its assets' identities and vulnerabilities. One of the greatest features is Kubernetes. The automated scanning capability is pretty standard in the market, and Tenable's prioritization engine helps improve the security posture.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The initial setup was very easy."
"It significantly eases the workload and streamlines the initial setup required to protect a website."
"I use it as a WAF, which is basically a web firewall to monitor and block traffic to our web server."
"Domain name scanning since it allows us to scan all our domain names and determine whether it has malware or if is reported as phishing."
"The initial setup was straightforward. Straight forward because the plugin can simply be installed and then it does its job. It's not complex, there is no learning curve. The online scan is simple, you put in the website address and the scan gives us a report on the browser itself. It's simple to use."
"The most valuable part is the analytics and visualization."
"The solution is stable."
"The most valuable features of Tenable.io Web Application Scanning are the integration into specific use cases and scanning. All of the features of the solution are useful."
"It has good unified web application scanning and exposure management."
"I would recommend Tenable.io Web Application Scanning to others."
"The initial setup is straightforward."
"We use the tool for our websites. We have a vulnerable subdomain. The tool helps to scan it for vulnerabilities."
"It is fully automated."
"The most effective feature of the product is the ability to scan the entire environment."
 

Cons

"It would greatly benefit customers if they implemented an online chat or messaging system for quicker assistance."
"In terms of improvement, the cost factor is always there."
"Confident score: Currently it does not have one and there are cases that most websites flagged are false-positives."
"Sucuri could provide help for specific security alerts in-line instead of requiring users to search for it in the help section."
"The main improvement I would like to see is support for .NET applications. If they could include this feature, I would include more sites in the protection."
"I would rate this solution an eight out of ten. The reason is that we have found sometimes customers or Google saying that there is something wrong with the website but Sucuri says that the site is clean so we do have to look at the site manually which means that the Sucuri scan does not pick up anything and everything."
"The reporting has a very limited customization capability."
"I would like for them to add proxy filtering, where you can transfer and alter the package. It is fully automated. Other web application testers programs are actually proxy software, and the proxy software gives you the flexibility of modifying the outgoing package, which will actually help you in exploiting any vulnerability in detail."
"The cloud and the on-premises versions have their own controllers, and there is no way to centrally manage controllers."
"Tenable.io Web Application Scanning is not very user-friendly and you need a lot of information to get proper reports. The tool's support is not very responsive."
"The technical support needs improvement. Currently, it takes time, which might be due to the free version, but providing some level of support could encourage future purchase decisions."
"The market is standard for vulnerability scanning, however, the posture can be improved through Tenable's prioritization engine."
"The report customization needs to be better."
"Tenable.io Web Application Scanning conducts a general scan, which wastes time. The scan needs to be specific."
 

Pricing and Cost Advice

"I’d simply say it’s really worth it."
"The ROI has been very good. Because of the solution, I have a tax break. The site developers were not always experienced people. We used to pay more for cleaning up the site when it was infected. Now, we have peace of mind knowing that the solution will clean up the site and that we won't have to go through the unnecessary process of restoring it from a backup. The protection on the WAF and the measures for backups have also prevented our site from going down."
"It stands out as a more cost-effective option compared to other cloud-based security services like Cloudflare or JetPass."
"Sucuri offers different plans, both the standard plan and an advanced plan. So there are different plans to choose from."
"I rate the product's pricing a four out of ten."
"It follows the same licensing scheme as Tenable.io and Tenable. sc."
"The pricing is okay."
"Tenable.io Web Application Scanning is expensive for small businesses."
"The application is extremely affordable. There are no additional costs involved with licensing. We switched to Tenable.io Web Application Scanning from other solutions due to pricing."
"For Tenable.io Web Application Scanning, it comes to around 6,50,000 Indian rupees, plus taxes."
"The price of the solution is reasonable compared to the competitors. The license cost is based on the number of users and the annual usage."
report
Use our free recommendation engine to learn which Domain Name System (DNS) Security solutions are best for your needs.
882,479 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
10%
Computer Software Company
9%
Financial Services Firm
8%
Manufacturing Company
6%
Financial Services Firm
13%
Computer Software Company
10%
Government
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise7
 

Questions from the Community

Ask a question
Earn 20 points
What do you like most about Tenable.io Web Application Scanning?
The most effective feature of the product is the ability to scan the entire environment.
What needs improvement with Tenable.io Web Application Scanning?
If there were a solution, I would like to see automation and an integrated remediation solution for vulnerability or patch management.
What advice do you have for others considering Tenable.io Web Application Scanning?
I do not understand what API approach means; I do not understand this term. I think Tenable.io Web Application Scanning is the best option on the market at the moment. My review rating for this pro...
 

Overview

 

Sample Customers

The Loft Salon, Tom McFarlin, WPBeginner, Taylor Town, Everything Everywhere, Financial Ducks in a Row, Chubstr, Real Advice Gal, Sujan Patel, Wallao, List25, School the World
IMDEX
Find out what your peers are saying about Cisco, Infoblox, Palo Alto Networks and others in Domain Name System (DNS) Security. Updated: February 2026.
882,479 professionals have used our research since 2012.