Technical Implementation Manager at a manufacturing company with 1,001-5,000 employees
Real User
Very scalable product
Pros and Cons
  • "I find Tenable SC to be a very scalable product."
  • "I think the vendor training provided for Tenable.sc could be a lower price. It's quite expensive for the training."

What is our primary use case?

Our primary use case for Tenable SC is its vulnerability scanning capability. 

What needs improvement?

I think the vendor training provided for Tenable SC could be a lower price. It's quite expensive for the training. 

For how long have I used the solution?

I have been working with Tenable SC for 4 years.

What do I think about the stability of the solution?

The stability of the Tenable SC product is satisfactory. 

Buyer's Guide
Tenable Security Center
April 2024
Learn what your peers think about Tenable Security Center. Get advice and tips from experienced pros sharing their opinions. Updated: April 2024.
770,141 professionals have used our research since 2012.

What do I think about the scalability of the solution?

I find Tenable SC to be a very scalable product. 

How was the initial setup?

The initial setup of Tenable SC is not unmanageable. 

What's my experience with pricing, setup cost, and licensing?

With regards to the setup of Tenable SC, I would advise others to spend time using the module, get familiar with the product, and in addition read the manual that is provided. 

Which other solutions did I evaluate?

We primarily use Tenable SC for vulnerability scanning and did not evaluate other options. This meets our needs.

What other advice do I have?

I would say there are approximately 30 users in our organization using the Tenable SC product. 

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Tech consultant at select softwares
Real User
Top 10
Provides clear and precise vulnerability details with few false positives compared to other solutions
Pros and Cons
  • "This solution has a much lower rate of false positives compared to competing products."
  • "The vulnerability scan does not work correctly until the access privileges are set by the system administrator."

What is our primary use case?

I use this solution to perform vulnerability assessments and then patch my systems using third-party tools.

The vulnerability scan is pretty fast and once you give it the right access privileges on the target system, you get very clear and precise details of the vulnerabilities.

How has it helped my organization?

This solution has a much lower rate of false positives compared to competing products.

It can operate in hybrid mode, too. The greatest strength of the product comes up when the agent is deployed on the endpoint to be scanned. Thereafter, even if the agent is out of the office network, it can still be scanned and will also send back data to the parent console.

What is most valuable?

The dashboard and the templates used to delvelop reports are awesome.

It is easy to run, scan, and categorize an asset as and when needed. The same asset can be present in two or more groups based on the identification.

This solution can now be deployed in cloud setups.

This solution provides a good reporting system and with a reasonably good level of third-party integration. McAfee has leveraged this capability beautifully in its Policy Orchestrator.

What needs improvement?

We need to give more customer demos and also highlight the strengths of the product that have been developed over a twenty-year period.

The vulnerability scan does not work correctly until the access privileges are set by the system administrator.

For how long have I used the solution?

I have been using this solution for a few years.

What do I think about the stability of the solution?

This system is stable under normal configurational mode. It is important to understand how many hosts it will handle and size the system accordingly.

What do I think about the scalability of the solution?

This is a very highly scalable system.

How are customer service and technical support?

I have not contacted technical support so far, as there was no issue to escalate.

Which solution did I use previously and why did I switch?

We did not use another solution prior to this one.

How was the initial setup?

I have worked on a few demos and they have been pretty straightforward to setup.

What about the implementation team?

I perform the deployment of this solution.

What was our ROI?

Yet to be calculated.

What's my experience with pricing, setup cost, and licensing?

Costing is pretty reasonable compared to the competition.

Which other solutions did I evaluate?

We evaluated Rapid7 and Qualys before choosing this solution.

Disclosure: My company has a business relationship with this vendor other than being a customer: I work for a software dealership and we have had good responses from customers on the product and its capabilities
PeerSpot user
Buyer's Guide
Tenable Security Center
April 2024
Learn what your peers think about Tenable Security Center. Get advice and tips from experienced pros sharing their opinions. Updated: April 2024.
770,141 professionals have used our research since 2012.
Rafael Ustariz - PeerSpot reviewer
IT security consultant at Netready LATAM
Consultant
Top 10
Simple setup, useful analysis, and helpful support
Pros and Cons
  • "The most valuable features in Tenable SC are scanning and analysis."
  • "Tenable SC can improve by making it easier to create complicated reports and have more effectiveness in the remediation area for comparison between the scans."

What is our primary use case?

I am using Tenable SC for vulnerability management and for the dashboards.

What is most valuable?

The most valuable features in Tenable SC are scanning and analysis.

What needs improvement?

Tenable SC can improve by making it easier to create complicated reports and have more effectiveness in the remediation area for comparison between the scans.

For how long have I used the solution?

I have used Tenable SC within the past 12 months.

What do I think about the stability of the solution?

Tenable SC is stable.

How are customer service and support?

Tenable SC support has been very helpful.

How was the initial setup?

The setup of Tenable SC is easy.

What other advice do I have?

I rate Tenable SC an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Infrastructure Engineer at a healthcare company with 1-10 employees
Real User
Dashboard features made it easy to track remediation progress, but exporting things out for reports was a little tough
Pros and Cons
  • "I found the dashboard features very useful. It made it easy to track remediation progress. I could publish dashboards to remediation teams and track the progress on the dashboards."
  • "The reporting side can be improved. The dashboards are nice, but exporting things out for reports for management was a little tough."

What is our primary use case?

In my previous company, we were using both Tenable IO and Tenable SC. We had the on-prem and the cloud versions. IO was a cloud version, and SC was on-prem.

In my new company, they do use Tenable, but I'm not part of that team. They have the latest version.

What is most valuable?

I found the dashboard features very useful. It made it easy to track remediation progress. I could publish dashboards to remediation teams and track the progress on the dashboards.

What needs improvement?

The reporting side can be improved. The dashboards are nice, but exporting things out for reports for management was a little tough.

We had the on-prem version and the cloud version, and I wasn't a big fan of having different consoles. It would have been nice to be able to have all those features in the cloud version because on-prem is a little tough to manage.

For how long have I used the solution?

I've been using it for about two years. I switched positions about six months ago, and at the moment, I am not using it. 

What do I think about the stability of the solution?

I find it stable.

How was the initial setup?

It was pretty straightforward.

What about the implementation team?

We had a consultant from Tenable with us.

What other advice do I have?

I would rate it a seven out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Information Security Analyst at a tech services company with 51-200 employees
Real User
Good reporting, alerting, and filtering capabilities and good integration with multiple vendors
Pros and Cons
  • "Tenable SC is good for reporting and alerting. The filtering feature is also very valuable. Its integration with multiple vendors is quite good. It can be integrated with SIEM solutions and PAM solutions such as Thycotic, which is very helpful."
  • "There is not much room for improvement. However, there should be a guide that describes the step-by-step procedures for doing tasks. Otherwise, training is required from a senior guy to a junior guy."

What is our primary use case?

We had a requirement to connect multiple branches into one console. We installed Nessus at multiple locations and then connected Nessus. We did the service scan and got the report on the central site with Tenable SC.

How has it helped my organization?

Previously, we were using Nessus, which required a lot of manual work in terms of reporting. We do a lot of customization, and Tenable SC has been very helpful. Reporting is just a click away in Tenable SC, whereas it used to take a long time to create a similar report and customize it in Nessus. 

What is most valuable?

Tenable SC is good for reporting and alerting. The filtering feature is also very valuable.

Its integration with multiple vendors is quite good. It can be integrated with SIEM solutions and PAM solutions such as Thycotic, which is very helpful.

What needs improvement?

There is not much room for improvement. However, there should be a guide that describes the step-by-step procedures for doing tasks. Otherwise, training is required from a senior guy to a junior guy.

What do I think about the scalability of the solution?

Our usage is the same. Currently, no increment is required in terms of the license.

How are customer service and technical support?

They are good.

Which solution did I use previously and why did I switch?

We used to use Rapid7, but there were too many false positives. So, we switched to Nessus, but in Nessus, we faced the challenge of reporting. Nessus required a lot of manual work in terms of reporting. Tenable SC has been quite helpful for reporting. 

How was the initial setup?

It is not straightforward. When you do integrations, it turns into a complex solution, but this complexity is required. If security is a priority, then complexity will be there for enterprise security.

It didn't take a long time. In one month, we were able to configure and run the reports. Everything was done within a month. We were in desperate need of such a solution, and this solution came. We already knew about integrations from the white papers and documents available on the Tenable website. They were very helpful. So, doing integration was not an issue. We did it without much effort. 

What about the implementation team?

I was heading this project as a project manager.

What other advice do I have?

It is a much better solution than other competitors. It provides almost everything that is required in terms of vulnerability management. If you are looking for overall enterprise security in terms of integrations and vulnerability management, you should go for Tenable SC or Tenable SCCV.

I would rate Tenable SC a nine out of ten. 

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Security Administrator at TOPNET
Real User
Top 20
Excellent availability model with fewer false positives than competitors
Pros and Cons
  • "Tenable.sc's best features are the availability model, accident management, and scoring."
  • "Tenable.sc's user interface could be improved."

What is our primary use case?

I primarily use Tenable.sc to search availability and for our workstation server and data center.

What is most valuable?

Tenable.sc's best features are the availability model, accident management, and scoring. It also gives fewer false positives than its competitors.

What needs improvement?

Tenable.sc's user interface could be improved.

For how long have I used the solution?

I've been using Tenable.sc for about two months.

What do I think about the stability of the solution?

Tenable.sc is very stable.

What do I think about the scalability of the solution?

Tenable.sc is scalable.

How are customer service and support?

Tenable's technical support is good.

How was the initial setup?

The initial setup was easy as we use the cloud version.

What's my experience with pricing, setup cost, and licensing?

Tenable.sc is more expensive than its competitors.

What other advice do I have?

I would give Tenable.sc a rating of eight out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
IT Consultant - Microsoft Design and Implementation at a tech services company with 1,001-5,000 employees
Consultant
Has good scans and good stability
Pros and Cons
  • "The scans are the most valuable aspect of this solution."
  • "The reporting needs a lot of work on the template."

What is our primary use case?

Our primary use case is for vulnerability assessment of our internal network.

What is most valuable?

The scans are the most valuable aspect of this solution. The reporting isn't so good but I use scans the most. The reporting needs a lot of work on the template. 

What needs improvement?

There should be an easier way to build your own type of reports because the data is there but it is quite painful to get what I want from it. I prefer Tenable SC to other solutions.

For how long have I used the solution?

We have been using Tenable SC for a little more than two years. 

What do I think about the stability of the solution?

Stability and scalability are good. The administrators use it. We have three regular users. 

How are customer service and technical support?

We have contacted their customer support and they were fine.

How was the initial setup?

We didn't have any issues with the initial setup. 

What's my experience with pricing, setup cost, and licensing?

We pay around 60,000 on a yearly basis. 

What other advice do I have?

Nessus is for a single company and tenable SC is for when you've got multiple repositories. SC is the same as Nessus, except it's got central logging. It's the same thing. For large widespread companies, you use SC, if you're a small to medium-sized company, you use Nessus.

I would rate it an eight out of ten. Not a ten because of the reporting. It needs improvement. 

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
it_user1395987 - PeerSpot reviewer
Presales Engineer at a tech services company with 11-50 employees
Reseller
Easy to install, very customizable with a lot of templates available; great technical support
Pros and Cons
  • "Very customizable with a lot of templates."
  • "Current web page needs improvement, slows down processes."

What is our primary use case?

I'm a pre-sales engineer and we are resellers of Tenable.

What is most valuable?

This solution is very customizable compared to everything else I've seen on the market, so you can easily customize it to suit your needs. There are a lot of templates you can use and you can install it pretty quickly so in one hour you can have your scanner up and running.

What needs improvement?

I think the company should redo their web page because the way things are now there are a lot of things you can't do. For example, if you want to filter something on the solution and have it filter down to all of your widgets, you can't do it, you have to go from one widget to the other. It takes some time if you have a big customer dashboard that's using some data. I think that the integration with a solution like Jira could be a little bit better for when you create tickets based on your vulnerability.

I know they are working on additional features related to the integration with the patch management like Qualys has, which is really amazing. This is the future and I know they're working on it. 

For how long have I used the solution?

I've been using this solution for the past six or seven years. 

What do I think about the stability of the solution?

Usually the solution is stable but it can be a little bit tricky which I think depends on the kind of BME and the sizing used. I'd say it was 80%, 85% stable.

What do I think about the scalability of the solution?

The solution is very scalable, it's one of the most scalable solutions that I've used so far, compared to Rapid7 and Qualys, it's very scalable. You can use it pretty much with anything, even if you start with 1000 IPs and scale up from 1000 to 10,000.

How are customer service and technical support?

Technical support is very efficient and they escalate the tickets when you have a big issue. When you open a ticket, they respond within the hour and they're pretty quick to find the issue. If you have a bigger issue, you can set up a Zoom call with them and that's very helpful. 

Which solution did I use previously and why did I switch?

I've used Rapid7 in the past and I've also used Qualys a little as well. I work with customers, so I go with whatever they want to use. 

How was the initial setup?

The initial setup is very straightforward and quick. 

What other advice do I have?

I would definitely recommend the solution but I would tell people that it requires dedicated staff. You need to have someone looking at what's going on when you scan and you need somebody to go through all the results, otherwise it just sits there.

I would rate this solution an eight out of 10. 

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
PeerSpot user
Buyer's Guide
Download our free Tenable Security Center Report and get advice and tips from experienced pros sharing their opinions.
Updated: April 2024
Buyer's Guide
Download our free Tenable Security Center Report and get advice and tips from experienced pros sharing their opinions.