Looking at options for vulnerability scanners — which ones would be a good fit for a midsize software startup?

Security Strategy & RoadmapThreat & Vulnerability Management
2.1k viewscircle icon23 Comments
Sort by:
Global CIO in Consumer Goods3 years ago

Nessus is good solution for midsize organizations.  Does the job at affordable costs.

Executive Director, Enterprise Infrastructure & Cybersecurity in Finance (non-banking)3 years ago

Qualms, Nessus, Tenable 

Founder and CTO in Software3 years ago

Nessus. Simple, effective and good reporting.

CTO in Transportation3 years ago

Right now we are using Qualys and Wazuh. We are starting to look into Nuclei as well.

Information Security Manager in Software3 years ago

I recommend nessus and openvas 

Content you might like

How are you currently managing SIEM costs? Have you found effective ways to actually reduce storage costs for your SIEM?

Read More Comments

Is footprinting an effective way to do vulnerability management?

Very effective1%

Somewhat effective52%

Slightly effective31%

Slightly ineffective8%

Somewhat ineffective3%

Not at all effective

Not sure yet1%

View Results

As part of our NYSE IPO prep, we’re debating how to communicate our system hardening efforts in regulatory disclosures (e.g., SEC Form 20-F, SFC).

Would you recommend sharing % compliance (e.g., “85% CIS Tier 2”) or sticking to qualitative descriptions of how we identify and mitigate risks? Also, do SFC/ISO 27001 expectations require full ISMS integration, or is a % model acceptable?

What would you say is the key component of your Security Awareness Program?

Video Training17%

Phishing Simulations63%

Infographics12%

Gaming5%

Other (please share below)

View Results

I'm looking to go for the Certified CISO certification & training as I'm an aspiring CISO. Any recommendations and additional certifications that I should be doing along with that? I already have CISSP. 

Read More Comments