+
+

Related Products

  • Astra Pentest
    283 Ratings
    Visit Website
  • ManageEngine Endpoint Central
    3,189 Ratings
    Visit Website
  • Aikido Security
    238 Ratings
    Visit Website
  • Criminal IP ASM
    18 Ratings
    Visit Website
  • Reflectiz
    33 Ratings
    Visit Website
  • ESET PROTECT Advanced
    2,302 Ratings
    Visit Website
  • NinjaOne
    5,368 Ratings
    Visit Website
  • NeuBird
    2 Ratings
    Visit Website
  • Orca Security
    594 Ratings
    Visit Website
  • Resco Inspections+
    68 Ratings
    Visit Website

About

Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Amazon Inspector automatically assesses applications for exposure, vulnerabilities, and deviations from best practices. After performing an assessment, Amazon Inspector produces a detailed list of security findings prioritized by level of severity. These findings can be reviewed directly or as part of detailed assessment reports which are available via the Amazon Inspector console or API. Amazon Inspector security assessments help you check for unintended network accessibility of your Amazon EC2 instances and for vulnerabilities on those EC2 instances. Amazon Inspector assessments are offered to you as pre-defined rules packages mapped to common security best practices and vulnerability definitions. Accelerate MTTR by using over 50 sources for vulnerability intelligence to help identify zero-day vulnerabilities quickly.

About

Nessus is trusted by more than 30,000 organizations worldwide as one of the most widely deployed security technologies on the planet - and the gold standard for vulnerability assessment. From the beginning, we've worked hand-in-hand with the security community. We continuously optimize Nessus based on community feedback to make it the most accurate and comprehensive vulnerability assessment solution in the market. 20 years later and we're still laser focused on community collaboration and product innovation to provide the most accurate and complete vulnerability data - so you don't miss critical issues which could put your organization at risk. Today, Nessus is trusted by more than 30,000 organizations worldwide as one of the most widely deployed security technologies on the planet - and the gold standard for vulnerability assessment.

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Audience

Anyone looking for a solution providing automated security assessment services

Audience

IT professionals searching for a Vulnerability Assessment solution

Support

Phone Support
24/7 Live Support
Online

Support

Phone Support
24/7 Live Support
Online

API

Offers API

API

Offers API

Screenshots and Videos

Screenshots and Videos

Pricing

No information available.
Free Version
Free Trial

Pricing

No information available.
Free Version
Free Trial

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 4.8 / 5
ease 5.0 / 5
features 4.8 / 5
design 5.0 / 5
support 4.4 / 5

Pros & Cons from Real Users

Pros

  • Customizable Scans Wide Platform Support Pre-built policies and Templates like PCI DSS and HIPAA Frequent Plugin Updates Active and Passive Detection Comprehensive Vulnerability Coverage
  • Nessus supports a wide range of operating systems and devices, making it versatile for diverse IT environments. Nessus benefits from an active community of users and professional support, ensuring that users can find solutions and best practices when needed. Nessus provides the flexibility to perform both agent-based scans for systems that require persistent monitoring and agentless scans for systems where installing an agent is impractical.
  • Nessus excels at identifying vulnerabilities in systems across a wide range of platforms, including operating systems, databases, network devices, and web applications. It checks for known vulnerabilities using both signature-based and heuristic-based scanning techniques Nessus can perform configuration audits by comparing system settings against industry best practices (e.g., CIS Benchmarks, DISA STIGs). This allows organizations to enforce security policies and ensure that systems are configured securely By providing Nessus with valid credentials (such as admin-level access), it can perform more in-depth scans and accurately identify vulnerabilities that require elevated privileges. Nessus can integrate with other security solutions such as SIEMs (Security Information and Event Management systems), ticketing systems (e.g., ServiceNow, Jira), and other vulnerability management tools. This helps automate workflows and streamline vulnerability remediation. Nessus offers an intuitive user interface with a simple setup process, making it accessible even to organizations without a dedicated security team. The interface provides easy access to scan configurations, reports, and plugin management.
  • 1) Nessus provides in-depth vulnerability scanning across a wide range of systems, applications, and devices, helping identify potential security risks quickly and thoroughly. 2) The vulnerability database is constantly updated, ensuring that the scanner detects the latest threats and vulnerabilities, which is crucial for maintaining up-to-date security. 3) The interface is intuitive and easy to navigate, even for users who aren’t security experts. It’s simple to run scans, view results, and take action based on the findings. 4) Nessus offers flexibility with customizable scanning profiles, allowing users to tailor scans to specific needs, whether it’s targeting particular systems, vulnerabilities, or compliance requirements. 5) The reports generated by Nessus are detailed and clear, offering actionable insights and prioritizing vulnerabilities based on severity. This helps teams address the most critical issues first.
  • In depth vulnerability scanning with very usable results in easy to read formats and reports that you can drill down into. Very detailed information for how quick the scan is.

Cons

  • Limited Automation Custom Scripting Complexity No Built-In Patch Management Limited Cloud Integration False Positives
  • The basic version of Nessus is free for limited use, accessing advanced features like compliance checks and extended reporting in Nessus Professional requires a subscription, which may not suit smaller organizations with tight budgets. Nessus scans can consume significant network and system resources, potentially slowing down operations or affecting the performance of critical systems during scans.
  • Nessus can be resource-heavy, especially when performing in-depth scans or scanning large environments. High network bandwidth and processing power are required to perform large-scale scans without negatively impacting system performance. In environments with limited resources, this could slow down network operations or impact system stability While Nessus does offer some web application scanning capabilities (e.g., detecting SQL injection, XSS, etc.), it is not as specialized or comprehensive as dedicated web application security testing tools like Burp Suite or OWASP ZAP. Organizations with a heavy focus on web applications may find Nessus lacking in depth for these specific needs
  • 1) While Nessus does integrate with some third-party tools, its integration options are more limited compared to some other vulnerability management platforms, which might be a drawback for larger organizations with complex IT environments. 2) Nessus can struggle with scaling up for very large, complex environments or enterprise-level networks, where more robust vulnerability management platforms might be better suited.
  • The free trial sucked. Not only is it limited to 7 days, but you can't even try the full feature set for that 7 days. It's limited to reporting on the first 16 devices it detects. Unfortunately on my network, it didn't make it to any servers before hitting that limit, so I only got info on workstations, a printer and a credit card reader. At least give me 1 full scan of my network so I can compare workstations to servers, or give me the ability to go back and pick certain IP addresses to scan, maybe via csv file upload?

Training

Documentation
Webinars
Live Online
In Person

Training

Documentation
Webinars
Live Online
In Person

Company Information

Amazon
Founded: 1994
United States
aws.amazon.com/inspector/

Company Information

Tenable
Founded: 2002
United States
www.tenable.com/products/nessus

Alternatives

Alternatives

Astra Pentest

Astra Pentest

Astra Security
PT Application Inspector

PT Application Inspector

Positive Technologies
Tenable One

Tenable One

Tenable
ESOF

ESOF

TAC Security

Categories

Categories

Vulnerability Management Features

Asset Discovery
Asset Tagging
Network Scanning
Patch Management
Policy Management
Prioritization
Risk Management
Vulnerability Assessment
Web Scanning

Vulnerability Management Features

Asset Discovery
Asset Tagging
Network Scanning
Patch Management
Policy Management
Prioritization
Risk Management
Vulnerability Assessment
Web Scanning

Integrations

Conviso Platform
HivePro Uni5
Kondukto
Phoenix Security
ScalePad ControlMap
Vulcan Cyber
Alert Logic
ArmorCode
Centraleyezer
Chainguard
Clockspring
Cloudaware
GAT
KernelCare Enterprise
PlexTrac
Praetorian Chariot
Seconize DeRisk Center
Seemplicity
The Respond Analyst

Integrations

Conviso Platform
HivePro Uni5
Kondukto
Phoenix Security
ScalePad ControlMap
Vulcan Cyber
Alert Logic
ArmorCode
Centraleyezer
Chainguard
Clockspring
Cloudaware
GAT
KernelCare Enterprise
PlexTrac
Praetorian Chariot
Seconize DeRisk Center
Seemplicity
The Respond Analyst
Claim Amazon Inspector and update features and information
Claim Amazon Inspector and update features and information
Claim Tenable Nessus and update features and information
Claim Tenable Nessus and update features and information