Tenable One

The plugins for new threats are published very quickly, we have tested Cloud Integration with AWS for cloud security and it's working perfectly to analyze IAM and cloud logging. Threat Intelligence module in showing the up to date risk landscape helping prioritize base on business criteria. However, a watch list of emails, technologies, and supply chain is missing to have a wider Threat Intelligence view. Regarding Issue prioritization, the vendor provides a good support willing to help, we had the basic support and then the Elite support and in both setups they were very helpful. In the reporting perspective the dashboards are very basic, there is missing to add historical data based on labels, remediation owners to relate it to the risk discovered. However, the API integration is very powerful, we perform calls every hour and we don't have restrictions and we are building a complex dashboard with the API but not using the dashboards that the platform offers due to the lacks mentioned. Regarding Asset Discovery is useful but expensive, basic network discovery can be done easily but integrating third party connectors or discovering assets with Attack surface management can be expensive since even if the asset already exists in one source it will be extra charge if it's discovered in other sources.