This doesn't constitute an endorsement or criticism of either product as they both shine in some capacities and are challenged in others. I'll add some additional insight having assumed responsibility for an organization running Nessus and replacing it with Rapid7 InsightVM. If you have a lot of web/applications to scan you may want to also get a web/application specific scanner. Note no scanner will.Ĭould be stronger on web assessment side. Won't find everything - it has constant updates and what not, but like with any tool it has it limitations and may not find everything you need it to. Note this is a lot better in recent versions as they now have this function but it can be improved. Vulnerability roll up - don't report on 15 things due to the same underlying issue. A high may be low in your case and vice versa. This is not Nessus only but all VA scanners - The classification (high, medium, low, etc.) are based off the finding and not your environment. Some settings are harder than others but nothing is overly complex One of the most common tools for vulnerability assessments and as such has a lot of community support.Įasy to use - pretty much a "point and shoot".
0 kommentar(er)
