Try our new research platform with insights from 80,000+ expert users

Tenable Security Center vs Zscaler Zero Trust Exchange Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Vulnerability Management (18th), Continuous Threat Exposure Management (CTEM) (3rd)
Tenable Security Center
Average Rating
8.2
Reviews Sentiment
7.2
Number of Reviews
56
Ranking in other categories
Vulnerability Management (5th), Cloud Security Posture Management (CSPM) (10th), Risk-Based Vulnerability Management (2nd)
Zscaler Zero Trust Exchange...
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
65
Ranking in other categories
Data Loss Prevention (DLP) (6th), Cloud Access Security Brokers (CASB) (9th), Application Control (6th), ZTNA as a Service (2nd), Secure Access Service Edge (SASE) (3rd), Remote Browser Isolation (RBI) (1st)
 

Mindshare comparison

Risk-Based Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Tenable Security Center9.0%
Qualys VMDR12.7%
Rapid7 InsightVM11.0%
Other67.3%
Risk-Based Vulnerability Management
ZTNA as a Service Market Share Distribution
ProductMarket Share (%)
Zscaler Zero Trust Exchange Platform15.7%
Prisma Access by Palo Alto Networks11.7%
Cato SASE Cloud Platform11.5%
Other61.1%
ZTNA as a Service
 

Featured Reviews

Reviewer6233 - PeerSpot reviewer
Works at a healthcare company with 10,001+ employees
Has become an indispensable tool in our cybersecurity arsenal
While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even greater value. One key area for enhancement is the searching capabilities within its vulnerabilities module. By incorporating the ability to create Boolean searches, users would gain the ability to apply more complex filters and customize their search criteria. This would greatly enhance the precision and efficiency with which security teams can identify and prioritize vulnerabilities. Having such tailored search capabilities would save time and resources by narrowing down vast lists of vulnerabilities to those that meet specific parameters relevant to our unique risk environment. Additionally, integrating more robust reporting and visualization tools would be advantageous. Enhanced dashboards that offer customizable visual representations of risk configurations and threat landscapes would facilitate better communication with stakeholders, making it easier to explain vulnerabilities and the rationale behind certain security measures. This would also aid in demonstrating the improvements and value derived from existing security investments to leadership and non-technical team members.
OndrejKOVAC - PeerSpot reviewer
Solution engineer at EXPERTience
Empower clients with risk-based vulnerability management through continuous workflow and valuable insights
Tenable Security Center could improve by implementing more dynamic data displays and translating reports into European languages. This is especially relevant in Central Eastern Europe, where clients often require reports in local languages. Additionally, the licensing model could be more flexible for managed security providers, similar to a pay-as-you-go model.
Sumit Bhanwala - PeerSpot reviewer
architect at Tata Consultancy
Cloud-based platform simplifies device and data center management
I find it to be good. The solution is cloud-based with the latest inspection engines, which I find to be amazing. We are less dependent on data centers and device management, which reduces our efforts significantly. It improves our device management, data center management, and updating devices. We need fewer engineers for this management, and it reduces time and efforts for data center management, device upgrades, and IT support.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"With Zafran Security, it integrates with your security controls, allowing you to take that risk score and reduce it based on the controls in place or increase the risk based on different factors, such as if the issue is internet reachable or if there's an exploit in the wild."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"Zafran is an excellent tool."
"We saw benefits from Zafran Security almost immediately after deploying it."
"Tenable.sc is user-friendly."
"I think that this is a good solution for evaluating vulnerability in the network."
"The most valuable feature of the product is the Assurance Report Card, which gives us an overview of the security poster in just a simple glance."
"The product is our second solution, and we are happy that it meets our requirements."
"The most valuable feature is the automatic and periodic management of security scans, along with the ability to consolidate all information into a single dashboard."
"Tenable.sc's best features are the availability model, accident management, and scoring."
"The solution is very intuitive and the dashboards are simple to use."
"Tenable Security Center's centralized platform helped with risk assessment and management across our IT environments, covering the patching process and providing detailed reports that significantly supported our reporting and audits and helped us close audit issues safely and successfully."
"Yes, it is very stable. I have never seen it go down, not once."
"It has been helpful in maintaining our infrastructure. The granular level control it offers allows us to set application policies per application for each user."
"The product's most valuable features are cloud-based services and secure internet access. We don't have to set up any physical appliances."
"Zscaler CASB's latency and architecture are excellent."
"The ZPA is a unique feature which offers VPN along with all the additional security needed."
"Users get direct secure access to applications over the internet."
"The UI is easy to use."
"On DLP terms, Zscaler Cloud DLP ensures that data doesn't go outside of the organization. So on the network level, Zscaler does a pretty good job."
 

Cons

"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"Tenable SC can improve by making it easier to create complicated reports and have more effectiveness in the remediation area for comparison between the scans."
"The vulnerability scan does not work correctly until the access privileges are set by the system administrator."
"The reports and plugins for reports and scans could benefit from enhancements."
"There is not much room for improvement. However, there should be a guide that describes the step-by-step procedures for doing tasks. Otherwise, training is required from a senior guy to a junior guy."
"The GUI could be improved to have all concerns and priorities use the same GUI, allowing them to see all tickets, assign vulnerabilities, and assign variation failures to each member of their team."
"For downloading reports, we have to go to the scan and then we have to go to the reports and download the Excel or CSV or PDF. I think these menus and clicks can be minimized."
"The solution should provide better web application features and support."
"The solution is expensive."
"Zscaler Private Access's reporting is poor. We should have more insight into the reports regarding what is blocked and allowed."
"Setup is a bit complex because there are many steps that need to be taken before onboarding and activating the solution."
"Users report application access or latency issues with Zscaler Private Access."
"An area for improvement would be the ease of configuration."
"What could be improved in Zscaler Private Access is its notification. For example, if there's a speed issue, there should be a pop-up that alerts the user about it. If there is a network quality issue, for example, it isn't good enough to connect to, or the network quality is bad, there should be a notification from the solution. Zscaler Private Access also needs improvement in terms of its interface and security."
"There could be more DLP-related features. Additionally, there needs to be flexibility for integrating ISP features."
"Sometimes applications crash on some machines, and we’d like Zscaler to give us some information as to why that may have happened. We’d like more detailed reports."
"The pre-defined dictionaries could be improved."
 

Pricing and Cost Advice

Information not available
"Compared to other companies or other products it could maybe be a little bit less, but the price is okay. I would say it's not very expensive."
"We're able to save because we don't have to employ more staff members to help wit ht he scheduling of the scans, running the reports or sending them out to the systems owners. That alone is a big ROI for us."
"This solution's price is quite high."
"I use a local license to perform penetration testing and I'm pretty happy with everything when it comes to pricing and licensing."
"The tool costs around 15,000 Saudi riyals monthly."
"My company needs to make yearly payments towards the licensing costs. The pricing of the solution falls in the mid-range level, so it is not too expensive"
"The price of Tenable SC is expensive, we pay approximately €70,000 for the license annually. We have to pay for each IP test. The cost of other solutions is far less, such as Nessus Professional, which is €3,000 annually."
"Costing is pretty reasonable compared to the competition."
"There is definitely an ROI."
"Zscaler SASE software is quite expensive compared to other solutions"
"The licensing model for Zscaler Cloud DLP allows you to only buy what you need. You don't need to buy it as a whole, so it's good."
"The technical support is good."
"Pricing for Zscaler Private Access is moderate. It's acceptable, though I can't give you the exact price currently. It's not too expensive, and on a scale of one to five, I would rate it a four out of five in terms of pricing."
"The product has reasonable pricing."
"Zscaler Private Access is extremely expensive."
"As per industry leads, Zscaler CASB is an expensive solution."
report
Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.
879,422 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
8%
Manufacturing Company
8%
Outsourcing Company
5%
Financial Services Firm
12%
Government
10%
Manufacturing Company
10%
Computer Software Company
9%
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
9%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise10
Large Enterprise27
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise12
Large Enterprise41
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
What do you like most about Tenable SC?
The tool's dashboard and reporting capabilities match our company's needs since we are able to modify the basic view ...
What is your experience regarding pricing and costs for Tenable SC?
The price of Tenable Security Center is not so high; it's relatively a cheaper solution.
What needs improvement with Tenable SC?
We did conduct a long implementation which relates to what I think can be improved about Tenable Security Center. In ...
What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...
What do you like most about Zscaler SASE?
The most valuable features of Zscaler Private Access are reliability, scalability, and availability.
What needs improvement with Zscaler SASE?
The solution needs to improve a lot of aspects.
 

Also Known As

No data available
Tenable.sc, Tenable Unified Security, Tenable SecurityCenter
Zscaler SASE, Zscaler DLP, Zscaler CASB, Zscaler CSPM, Zscaler Browser Isolation, Zscaler Posture Control
 

Overview

 

Sample Customers

Information Not Available
IBM, Sempra Energy, Microsoft, Apple, Adidas, Union Pacific
Siemens, AutoNation, GE, NOV
Find out what your peers are saying about Tenable Security Center vs. Zscaler Zero Trust Exchange Platform and other solutions. Updated: July 2025.
879,422 professionals have used our research since 2012.