We have experience with Tenable.io Web Application Scanning, and we use it as well; we have approximately ten licenses for web application scanning. We use it to find vulnerabilities, but Tenable.io Web Application Scanning does not include remediation; we remediate with other products. We use the dashboard to find vulnerabilities and attempt to find solutions to these vulnerabilities, but Tenable.io Web Application Scanning does not have remediation capabilities. We use it to find compliance with OWASP Top 10 threats. Tenable.io Web Application Scanning does not have automation beyond scheduling scans; the only automatic feature is scan scheduling. In each scan, the advanced scan option allows us to run the scan with compliance, and we use this feature. Tenable.io Web Application Scanning helps us determine whether there is penetration audit exposure to our system and web application. It is a good solution; we use it to scan public applications, and it helps us identify whether there are vulnerabilities or CVEs that hackers can exploit.
I use Tenable.io Web Application Scanning ( /products/tenable-io-web-application-scanning-reviews ) to scan our code base once a month to enhance our security operations.
Cyber Security Architect at a comms service provider with 10,001+ employees
Real User
Top 5
Feb 19, 2025
I have at least three use cases. One is for ITDR solutions for threat detection. Another is the vulnerability scanning process that I designed and implemented across five companies based on Gartner implementation papers, and one is for OT.
CEO and Managing Director at Digidata Infsystems Private Limited
Reseller
Top 5
Jul 12, 2024
It's nice to work with because it gives good results for web application scanning according to OWASP Top 10 and NISC. It's also a very simple tool to use.
We use the solution for testing and applications. It is for scanning web applications that we deploy for customers. We provide the solution to clients. It does help them check for vulnerabilities on web applications.
Cyber Security Analyst at a printing company with 11-50 employees
Real User
Nov 8, 2022
The solution is primarily used for vulnerability scanning. We are using it for our internal network and scanning for access in our internal network. For example, sometimes, there are some vulnerabilities in the system that are happening and are unexpected. We use this for finding these vulnerable cases in that system, like blocks4j, and then deal with them. If there's a patch required, we handle advice on patching the system to remove the vulnerability. I put in patch requests and handle reports.
Security Specialist at a security firm with 51-200 employees
Real User
Feb 10, 2022
I work for a security company, and I implement Tenable for our customers. I just implement this technology. I'm not working with the users. Our main use case is for implementing and starting scans for the whole company or a specific host. It is used for creating reports or dashboards for the vulnerabilities of the whole company. As a product for web application scanning, the results are uploaded to the cloud, and the management is on the cloud, but we can implement an on-premises scanner, or we can scan the on-premises web applications of our customers.
Professional services team lead at a tech services company with 1,001-5,000 employees
Reseller
Top 20
Oct 5, 2021
Tenable.io Web Application Scanning is very useful for scanning container exposure, and also for scanning all of the external IP addresses for any organization using Tenable predefined scanners.
Application Security Tools are essential for organizations looking to protect their software applications from vulnerabilities that could lead to breaches or exploits. These tools provide automated solutions for identifying, managing, and mitigating risks associated with application vulnerabilities.These tools have gained recognition for their ability to integrate seamlessly into development pipelines, providing security teams with real-time data on potential risks. They support multiple...
We have experience with Tenable.io Web Application Scanning, and we use it as well; we have approximately ten licenses for web application scanning. We use it to find vulnerabilities, but Tenable.io Web Application Scanning does not include remediation; we remediate with other products. We use the dashboard to find vulnerabilities and attempt to find solutions to these vulnerabilities, but Tenable.io Web Application Scanning does not have remediation capabilities. We use it to find compliance with OWASP Top 10 threats. Tenable.io Web Application Scanning does not have automation beyond scheduling scans; the only automatic feature is scan scheduling. In each scan, the advanced scan option allows us to run the scan with compliance, and we use this feature. Tenable.io Web Application Scanning helps us determine whether there is penetration audit exposure to our system and web application. It is a good solution; we use it to scan public applications, and it helps us identify whether there are vulnerabilities or CVEs that hackers can exploit.
I use Tenable.io Web Application Scanning ( /products/tenable-io-web-application-scanning-reviews ) to scan our code base once a month to enhance our security operations.
I have at least three use cases. One is for ITDR solutions for threat detection. Another is the vulnerability scanning process that I designed and implemented across five companies based on Gartner implementation papers, and one is for OT.
It's nice to work with because it gives good results for web application scanning according to OWASP Top 10 and NISC. It's also a very simple tool to use.
We mainly use Tenable.io Web Application Scanning to scan vulnerabilities for web application deployment.
We use the solution to get the daily scans and to know the vulnerabilities of the environment.
The fundamental objective of this product is to enhance the overall security, be it through verification within the organization or at the user's end.
We used the solution to asses the security risk of our client's customer-facing platform.
We use the solution for testing and applications. It is for scanning web applications that we deploy for customers. We provide the solution to clients. It does help them check for vulnerabilities on web applications.
The solution is primarily used for vulnerability scanning. We are using it for our internal network and scanning for access in our internal network. For example, sometimes, there are some vulnerabilities in the system that are happening and are unexpected. We use this for finding these vulnerable cases in that system, like blocks4j, and then deal with them. If there's a patch required, we handle advice on patching the system to remove the vulnerability. I put in patch requests and handle reports.
I'm a security consultant using Tenable to help our clients perform vulnerability analysis.
I work for a security company, and I implement Tenable for our customers. I just implement this technology. I'm not working with the users. Our main use case is for implementing and starting scans for the whole company or a specific host. It is used for creating reports or dashboards for the vulnerabilities of the whole company. As a product for web application scanning, the results are uploaded to the cloud, and the management is on the cloud, but we can implement an on-premises scanner, or we can scan the on-premises web applications of our customers.
Tenable.io Web Application Scanning is very useful for scanning container exposure, and also for scanning all of the external IP addresses for any organization using Tenable predefined scanners.
We primarily use Tenable.io to scan all of our assets to identify vulnerabilities and determine risk percentages for each.