I am using it for scanning and checking vulnerabilities. I am using the Azure version of Tenable Nessus.
Senior Manager at Clearsale
Does everything that it needs to, provides good value for money, and is very easy to use
Pros and Cons
- "I like this solution because it is complete. It can scan and check many types of vulnerabilities. It can also check for compliance."
- "I like this solution because it is complete, it can scan and check many types of vulnerabilities, it can also check for compliance, it fits very well in my environment, it is very easy to use, and there is a very good cost-benefit of this solution."
- "There should be a possibility to install agents on scanned machines. Tenable IO provides the capability of using local agents to check local problems, but this feature is not there in Tenable Nessus Professional. It would be nice to have something similar in Tenable Nessus Professional. We should have the capability to use local agents installed on the machines to locally check a problem."
- "There should be a possibility to install agents on scanned machines. Tenable IO provides the capability of using local agents to check local problems, but this feature is not there in Tenable Nessus Professional."
What is our primary use case?
What is most valuable?
I like this solution because it is complete. It can scan and check many types of vulnerabilities. It can also check for compliance.
It fits very well in my environment. It is very easy to use, and there is a very good cost-benefit of this solution.
What needs improvement?
There should be a possibility to install agents on scanned machines. Tenable IO provides the capability of using local agents to check local problems, but this feature is not there in Tenable Nessus Professional. It would be nice to have something similar in Tenable Nessus Professional. We should have the capability to use local agents installed on the machines to locally check a problem.
What do I think about the stability of the solution?
It is stable.
Buyer's Guide
Tenable Nessus
March 2026
Learn what your peers think about Tenable Nessus. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
885,376 professionals have used our research since 2012.
What do I think about the scalability of the solution?
It is, for sure, scalable. We have 10 or 12 people who use this solution.
How are customer service and support?
We never have any kind of problem or lack of response. I would rate them a ten out of ten.
How was the initial setup?
It is very easy. It is pretty straightforward.
What's my experience with pricing, setup cost, and licensing?
It has a fair cost and very good cost-benefit ratio.
What other advice do I have?
I would recommend it to others. It does everything that such a solution needs to do. It can check for vulnerabilities and compliance. It is also very easy to use. It is better than its competitors, such as Rapid7.
I trust Tenable solutions. I have worked with Tenable IO a few years ago, and with Tenable Nessus, I had the same feeling that I had with Tenable IO. It is a very good solution. It is more expensive than Tenable IO, but it is a complete solution.
I would rate it a nine out of ten.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Operation Director at GLOBALIP
Automates scanning process, enhancing the ability to monitor the security landscape continuously
Pros and Cons
- "It notifies us of vulnerabilities as they arise, allowing us to respond quickly without manual intervention."
- "The product could have unique features similar to one of its competitors."
How has it helped my organization?
The platform is essential for vulnerability management tasks and integrates with various data management applications.
What needs improvement?
The product could have unique features similar to Qualys.
For how long have I used the solution?
We have been using Tenable Nessus for about a year to a year and a half. We are using the latest version to ensure access to all the latest features.
Which solution did I use previously and why did I switch?
While Tenable offers a robust solution, the main competitor, Qualys, has some unique features. However, Tenable has a larger market share, indicating that it has undergone extensive testing and development based on customer feedback.
How was the initial setup?
The complexity of deploying Nessus largely depends on the customer's operational environment. If the environment has diverse systems, implementation may be more complex, while a more uniform system allows for easier setup.
The timeline for implementation could range from one week to several months based on these factors.
What's my experience with pricing, setup cost, and licensing?
The product pricing is dynamic and varies based on the specific needs of each project and customer.
Discounts can be offered based on competition and project requirements, making it a relative cost depending on the context.
What other advice do I have?
The solution automates vulnerability checks, which is crucial for our customers who cannot dedicate a team to monitor security issues constantly. It notifies us of vulnerabilities as they arise, allowing us to respond quickly without manual intervention.
It automates the scanning process, allowing us to schedule regular scans, generate reports, and receive notifications about critical vulnerabilities via email. It enhances our ability to monitor the security landscape continuously.
Overall, I rate it a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Buyer's Guide
Tenable Nessus
March 2026
Learn what your peers think about Tenable Nessus. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
885,376 professionals have used our research since 2012.
Security Infrastructure Engineer at NP Secure Co.,Ltd
A vulnerability assessment tool with patch management capabilities that offers ease of deployment
Pros and Cons
- "The initial setup of Tenable Nessus is very easy."
- "The problems I faced with Tenable Nessus were related to its dashboard's customization capabilities and its ability to provide data to third-party sources."
What is our primary use case?
I use Tenable Nessus for vulnerability assessment so that you can scan for CVEs and existing CVEs. Tenable Nessus will show you the latest update on those vulnerabilities and where it needs patches, so it goes hand in hand with patch management. As soon as you scan, you can see whether it needs patching, and if needed, you can go ahead and deploy patch management to address the current issue.
What is most valuable?
The most valuable features of the solution are the policy and the active scan. The features are different for Tenable Security Center since it is more on an on-premises model. The solution also has features like Tenable.io and Tenable Web App Scanning.
What needs improvement?
I wouldn't want to change anything about Tenable Nessus since I haven't found or run into any issues in Tenable Nessus.
I like Tenable since I find everything related to the solution simplified and easy to use. You can approach the online community of Tenable when you run into a problem, and there is a bunch of information available there that you can gather and use for troubleshooting purposes.
I faced some problems with Tenable Nessus when dealing with some of our company's customers in China. The problems I faced with Tenable Nessus were related to its dashboard's customization capabilities and its ability to provide data to third-party sources. The solution should offer simplified data-sharing capabilities. Though we have the dashboards and can customize them, the options for customization are available in the templates provided by Tenable Nessus. It might not be possible with Tenable Nessus to add every component a person wants to a single dashboard since they can only choose whatever is available on the templates provided by Tenable Nessus. The aforementioned areas can be considered for improvement in the solution.
For how long have I used the solution?
I have been using Tenable Nessus for two months. My company operates as a reseller of the product while also having a partnership with the solution.
What do I think about the stability of the solution?
Stability-wise, I rate the solution an eight out of ten.
What do I think about the scalability of the solution?
Scalability-wise, I rate the solution an eight out of ten.
Around 90 percent of our company's customers work with Tenable Nessus.
How are customer service and support?
For the solution's technical support, our company directly seeks help from the solution's vendor in Vietnam or Singapore, who are very responsive. I rate the technical support an eight out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup of Tenable Nessus is very easy. You can get the application's installation file and implement it faster than ManageEngine, making it a simple process. I rate the initial setup of Tenable Nessus a nine out of ten.
The solution is deployed on an on-premises model.
With Tenable Nessus, you have a file, and you just need to install it. In the on-premises model of the solution, you have a dashboard or console that you go to, which is like an internal website that you have set up so that you can get access to the on-premises version of the product.
What's my experience with pricing, setup cost, and licensing?
I rate the product's price seven or eight on a scale of one to ten, where one is low price and ten is high price.
What other advice do I have?
Tenable Nessus is a great tool. I believe everyone should be using Tenable Nessus since it is a tool that can be used for vulnerability assessment when companies face some vulnerabilities to find security holes or threats.
I rate the overall solution a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer.
Head of IT security at a financial services firm with 10,001+ employees
Helps with vulnerability management trafficking across an entire group
Pros and Cons
- "I am impressed with the tool's vulnerability scanning."
- "The tool needs to upgrade asset tracking."
What is our primary use case?
We use the solution for vulnerability management trafficking across an entire group.
What is most valuable?
I am impressed with the tool's vulnerability scanning.
What needs improvement?
The tool needs to upgrade asset tracking.
For how long have I used the solution?
I am using the tool for two years.
What do I think about the stability of the solution?
The solution is extremely stable. I would rate the tool's stability a nine out of ten.
What do I think about the scalability of the solution?
I didn't encounter any issues with scalability and I would rate it a nine out of ten. We have around 3000 user endpoints that are being monitored. My company has around 20 users for the tool.
How are customer service and support?
Our local partner helps with the support.
How was the initial setup?
I would rate the tool's setup a seven out of ten. It is not an easy setup but with proper support, the process is doable.
What was our ROI?
The solution gives us ROI since it offers visibility and helps to tighten controls in our network.
What's my experience with pricing, setup cost, and licensing?
I would like to see better discounts.
What other advice do I have?
I would rate the solution a nine out of ten. It is one of the best tools to use if compliance is your priority.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Consultant at Tata Consultancy
A mature product that's easy to set up and offers reasonable pricing
Pros and Cons
- "The solution can scale well."
- "Nessus is a very stable product, and it has been a pioneer and has been around for a long time."
- "We'd like to see the solution embrace more user-friendliness."
- "We'd like to see the solution embrace more user-friendliness."
What is our primary use case?
Tenable is for scanning the vulnerabilities on the endpoint. That's the prime use case. It can also be extended for scanning web publications, et cetera.
What is most valuable?
Nessus is a very stable product. And it has been a pioneer and has been around for a long time. Their vulnerability dashboards are very good to use.
It is easy to set up.
The solution can scale well.
The pricing is reasonable.
What needs improvement?
While the pricing is quite good, any client would, of course, like it to be a bit less.
We'd like to see the solution embrace more user-friendliness. That said, currently, we are happy with the product.
For how long have I used the solution?
I've used the solution for a while. it's been a couple of years.
What do I think about the stability of the solution?
It is a stable, reliable product. The performance is good. There are no bugs or glitches. It doesn't crash or freeze.
What do I think about the scalability of the solution?
I have found the product to be scalable.
How are customer service and support?
We generally don't have a lot of requirements for tech support with Tenable. We have been using it for so long, we have received quite a good amount of training from them at this point. Therefore, we don't look for a lot of tech support.
How was the initial setup?
The setup is quite straightforward and simple. I wouldn't describe the process as overly complex.
The deployment time depends on how the endpoints are distributed. If it is a single one within one country and one region, it is very fast. We can do it in less than three months.
What about the implementation team?
We are consultants. We can assist users with the setup process.
What's my experience with pricing, setup cost, and licensing?
It's not an overly expensive solution. It's pretty affordable.
Users pay an annual licensing fee.
What other advice do I have?
I'm a consultant.
We can deploy the solution either on-premises or on the cloud.
I'd advise potential new users to look at what the landscape is. And based on the landscape, they should be able to fit the product. You need to first consider your strategy and build towards that. We would recommend this solution to others if it seems to fit their needs.
I'd rate the solution nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Chief Executive Officer at a outsourcing company with 11-50 employees
User-friendly, easy to install, has good functionality, and technical support
Pros and Cons
- "The results are not that bad, but the key selling point is that it is an affordable tool set."
- "It is a very easy tool to use."
- "They have added a new Tenable Nessus Expert. That is their new product, which caters to the cloud and everything else. I am assuming that the new features and product enhancements are based on that tool set, but we haven't reviewed it yet."
- "They have added a new Tenable Nessus Expert. That is their new product, which caters to the cloud and everything else."
What is our primary use case?
We use Tenable Nessus for vulnerability scanning.
What is most valuable?
The results are not that bad, but the key selling point is that it is an affordable tool set.
It is a very easy tool to use.
We are happy with the existing features.
We are happy with the functionality, and what we get from the tool.
What needs improvement?
I am not sure. I see they have released new products that we haven't yet evaluated. I believe the new products are the opportunity for improvement that they are bringing to market. But for the time being,
They have added a new Tenable Nessus Expert. That is their new product, which caters to the cloud and everything else.
I am assuming that the new features and product enhancements are based on that tool set, but we haven't reviewed it yet.
For how long have I used the solution?
I have been working with Tenable Nessus for 10 years.
It's a proper toolkit, it goes a long way with us.
We are working with the latest version.
What do I think about the stability of the solution?
Tenable Nessus is very stable.
I would rate the stability of this solution a five out of five.
What do I think about the scalability of the solution?
Tenable Nessus is a scalable solution, I would rate the scalability a five out of five.
It is based on the number of endpoints. We have 1,500 endpoints in our company.
How are customer service and support?
We can contact technical support using their web console. We can log a support ticket as end users, although we seldom use this feature.
I would rate their technical support a five out of five.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We are also working with Rapid7 InsightVM.
It is not as good as Rapid7 from our perspective, but it is part of our toolbox arsenal. As a result, we have it on board and solely use it internally.
How was the initial setup?
It is very easy to deploy.
This solution was deployed in 30 minutes, or less. It is very easy. It is straightforward, and out of the box.
What about the implementation team?
The deployment was completed in-house. We did it ourselves.
We only need one engineer to deploy and maintain this solution.
What was our ROI?
I would rate the return on investment a five out of five.
What's my experience with pricing, setup cost, and licensing?
Cost-wise, it's an affordable tool.
Licensing fees are paid annually.
I would rate the licensing cost a five out of five.
What other advice do I have?
I would rate Tenable Nessus a ten out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Principal Security Architect at a tech vendor with 10,001+ employees
Is easy to use and configure, and has a lot of plugins
Pros and Cons
- "The ease of use is the primary valuable feature. This specific version is very straightforward. I like the ability to modify it and configure it based on the different policies."
- "The ease of use is the primary valuable feature, and this specific version is very straightforward with the ability to modify and configure it based on different policies while offering a large number of plugins that keep it up to date with new vulnerabilities."
- "Multiple user access would be an area for improvement from a user-access perspective. A role-based access control feature would be great because at present, there is a limitation with only one account. If that account gets compromised or gets locked, then we will encounter problems."
- "Multiple user access would be an area for improvement from a user-access perspective. A role-based access control feature would be great because at present, there is a limitation with only one account."
What is our primary use case?
We use it predominantly for vulnerability scanning and compliance scanning as part of the vulnerability and compliance protocols in one of our programs.
What is most valuable?
The ease of use is the primary valuable feature. This specific version is very straightforward. I like the ability to modify it and configure it based on the different policies.
I also like the number of plugins. It has quite a lot of plugins that keep it up to date with the different vulnerabilities coming out.
What needs improvement?
Multiple user access would be an area for improvement from a user-access perspective. A role-based access control feature would be great because at present, there is a limitation with only one account. If that account gets compromised or gets locked, then we will encounter problems.
It would be good to have a way to store filters from searches so that you don't have to recreate them from scratch every time. To be able to have them saved as a list of filters would be really useful.
It would be really useful to have a way to assess the risk of a specific vulnerability based on a number of factors which could be tailored. It could be a tailored set of factors you introduce to see a potential risk score or a different view of the CVSS score.
A lot of organizations do this manually, and some of them have some other ways of identifying or assessing the risk of vulnerabilities. It would be really useful to have a framework which allows you to create a way to assess the risk of vulnerabilities on the platform and potentially prioritize them or provide information as a report to management or to other teams for resolution.
It would be really nice to have a way to visualize the different results from the scans. For example, if you scan a Windows 2016 Server and you have a number of vulnerabilities, it would be nice to somehow show the vulnerabilities in a graphical format and potentially combine some of the outcomes into a graphical representation showing trending. Trending is quite important, especially when I speak to my senior management stakeholders and try to show the security posture and status. It would help to provide a long and wide view of where the vulnerabilities are and what kind of aging is present.
For how long have I used the solution?
I've used it for three and a half years.
What do I think about the stability of the solution?
Nessus Manager is very stable; I haven't had any problems. I'd give the stability of the product a five out of five.
What do I think about the scalability of the solution?
The product itself is not scalable by design. It is a single-user product, so it doesn't allow you to have multiple users at the same time. You have only one account. The type of product that we're using is not really meant for huge enterprises, and it's a bit more limited in terms of usage.
At present, I use the personal version for the account I'm looking after, but we probably have less than five people using this platform.
How was the initial setup?
The initial setup was easy.
What about the implementation team?
We implemented it ourselves. The deployment was done by one engineer, and it did not take too long.
What was our ROI?
The project in which I have been using it, it has been great because we satisfy a very crucial requirement. We have brought around vulnerability management, so it's really good ROI for what we have.
What's my experience with pricing, setup cost, and licensing?
Nessus Manager is not an expensive product. It has its limitations, but the pricing reflects that.
We have a yearly subscription.
What other advice do I have?
I would recommend Nessus Manager and rate it at eight on a scale from one to ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Consultant at a computer software company with 11-50 employees
Simple implementation, beneficial vulnerability assessments, and helpful support
Pros and Cons
- "The most valuable feature of Tenable Nessus is vulnerability assessments. There are a lot of threats around the world and this solution is the first to come out with detection rules."
- "The most valuable feature of Tenable Nessus is vulnerability assessments, as there are a lot of threats around the world and this solution is the first to come out with detection rules."
- "Tenable Nessus could improve the reporting by adding some dashboards. The reports are a hassle at this time. Tenable.io has more detailed reports. Having a better dashboard that can show where the vulnerabilities are and be categorized would be helpful. We then could present them to upper management for a deep overview of our network posture which they do not see."
- "Tenable Nessus could improve the reporting by adding some dashboards. The reports are a hassle at this time."
What is our primary use case?
We are using Tenable Nessus for vulnerability management. Not exactly the management, but we perform vulnerability assessments mostly for internal networks. Additionally, we use Acunetix and it comes into play for the web application.
What is most valuable?
The most valuable feature of Tenable Nessus is vulnerability assessments. There are a lot of threats around the world and this solution is the first to come out with detection rules.
What needs improvement?
Tenable Nessus could improve the reporting by adding some dashboards. The reports are a hassle at this time. Tenable.io has more detailed reports. Having a better dashboard that can show where the vulnerabilities are and be categorized would be helpful. We then could present them to upper management for a deep overview of our network posture which they do not see.
For how long have I used the solution?
I have been using Tenable Nessus for approximately seven years.
What do I think about the stability of the solution?
Tenable Nessus is stable.
What do I think about the scalability of the solution?
Tenable Nessus is scalable, it can scale up and down.
We have five or six people using this solution occasionally. We have monthly schedules for scanning, the solution is not used daily.
How are customer service and support?
The support of Tenable Nessus is responsive and helpful.
I rate the support from Tenable Nessus a five out of five.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have previously used Acunetix and they are more focused on web applications instead of vulnerability assessments. Tenable Nessus lacks in this area, they should focus more on the web applications side.
How was the initial setup?
The initial setup of Tenable Nessus is straightforward. There is helpful documentation that is provided.
I rate the setup of Tenable Nessus a five out of five.
What about the implementation team?
We did the implementation of the solution in-house.
What's my experience with pricing, setup cost, and licensing?
When comparing the price of Tenable Nessus to other similar solutions, such as Acunetix, Tenable Nessus is not as expensive. It is averagely priced in the market. We pay for the solution annually.
What other advice do I have?
My advice to others wanting to implement this solution is they need to understand what will be scanned. For example, if they are using internal servers or something similar, and is it on the cloud, or web applications, this is something they need to know. It's a good idea to evaluate these things on their end before choosing to use the solution. This solution focuses more on the servers or the network security side. Acunetix focuses more on the web application side. This is where the buyer has to evaluate and know their use case.
I rate Tenable Nessus a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Tenable Nessus Report and get advice and tips from experienced pros
sharing their opinions.
Updated: March 2026
Product Categories
Vulnerability ManagementPopular Comparisons
SentinelOne Singularity Cloud Security
Microsoft Defender for Cloud
Qualys VMDR
Tanium
Zafran Security
JFrog Xray
Orca Security
Tenable Security Center
Claroty Platform
Tenable Vulnerability Management
Acunetix
TrendAI Vision One – Cloud Security
Rapid7 InsightVM
Buyer's Guide
Download our free Tenable Nessus Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Qualys VM vs Tenable Nessus: Comparison
- How would you choose between Rapid7 InsightVM and Tenable Nessus?
- What's the difference between Tenable Nessus and Tenable.io Vulnerability Management?
- How does Tenable Nessus compare with Qualys VM?
- What are the main differences between Qualys VMDR and Tenable Nessus?
- How inadvisable is it to use a single vulnerability analysis tool?
- What are the benefits of continuous scanning for vulnerability management?
- When evaluating Vulnerability Management, what aspect do you think is the most important to look for?
- What is a more effective approach to cyber defense: risk-based vulnerability management or vulnerability assessment?
- What are the main KPIs that need to be implemented to have better posture in vulnerability projects?





















