Tenable
Exposure Management Platform
Tenable created Nessus and is a global leader in vulnerability management. Tenable One brings VM, Cloud Security, OT Security and Identity Exposure together in a single Exposure Management platform.
What Tenable One includes.
Tenable One is a single Exposure Management platform. It shows vulnerabilities and risks across the whole attack surface.
Key capabilities.
VPR prioritization
Vulnerability Priority Rating is Tenable’s own risk score. It takes into account exploitation in the wild and threat intelligence.
Attack Path Analysis
Graph analysis of attack paths. Shows how vulnerabilities, accounts and assets are linked.
Cyber Exposure Score
A single risk metric for the organization, with benchmarking against industry data.
Predictive Prioritization
An ML model predicts which CVEs will be exploited in the near future.
Compliance auditing
Ready-made templates for PCI DSS, HIPAA, CIS Benchmarks, NIST, ISO 27001 and other standards.
Agent + Agentless
Flexible data collection: Nessus Agent for remote hosts and agentless collection through cloud provider APIs.
Agentless OT
Passive monitoring of industrial networks without installing agents on PLCs and SCADA. Active queries only when needed.
Tenable Research
Tenable’s own research team: thousands of new plugins a year and rapid updates for zero-days.
Who uses Tenable and how.
Financial sector
PCI DSS scanning, vulnerability control for core banking systems, protection of Active Directory against compromise.
Public sector
Scans government information systems and OT networks at critical infrastructure sites. Audits compliance with national cybersecurity standards.
Industry and critical infrastructure
Tenable OT Security for energy, oil and gas and manufacturing. Passive SCADA monitoring.
Cloud security
CNAPP for AWS, Azure and GCP: misconfigurations, IaC, KSPM for Kubernetes and containers.
DevSecOps
Scans IaC (Terraform, CloudFormation), Docker images and repositories. Moves security checks earlier in development (shift-left).
Infrastructure audits
Nessus for one-time audits before certification. Scanning for compliance with CIS, NIST and industry standards.
SaaS, on-prem or hybrid.
Tenable offers different delivery models depending on regulatory requirements and architecture.
Tenable One Cloud
A cloud Exposure Management platform with automatic plugin updates and scaling.
- Fast deployment
- All Tenable One modules
- Attack Path Analysis
Tenable Security Center
The on-prem VM platform (formerly SecurityCenter) for regulated organizations and isolated networks.
- Data inside the perimeter
- Air-gapped environments
- Plugin customization
Nessus Pro / Expert
A local scanner for audits and small installations. Requires no centralized infrastructure.
- 100,000+ plugins
- Web App + IaC (Expert)
- For auditors and pentesters
Tenable integrations.
Tenable integrates with SIEM, ITSM, EDR and cloud platforms through APIs and native connectors.
Which product to choose.
CYBER BOOST will help you choose the right set of Tenable products.
| Capability | Nessus | Tenable VM | Tenable One | Sec. Center |
|---|---|---|---|---|
| Network scanning | ✓ | ✓ | ✓ | ✓ |
| Cloud console (SaaS) | - | ✓ | ✓ | - |
| On-prem deployment | ✓ | - | - | ✓ |
| VPR prioritization | - | ✓ | ✓ | ✓ |
| Cloud Security (CNAPP) | - | - | ✓ | - |
| OT Security | - | - | ✓ | Add-on |
| Identity Exposure (AD) | - | - | ✓ | - |
| Attack Path Analysis | - | - | ✓ | - |
| Who it’s for | Auditors | VM teams | CISO / EM | Regulated industries |
Frequently asked questions
What is Tenable One?
How is Nessus different from Tenable VM?
Can Tenable be deployed on-premise?
Does Tenable support OT and SCADA scanning?
Request a Tenable demo
We reply within one business day.