Howdy all,
I've been working with Arctic Wolf's managed risk portal for a while. I'm not having a great experience with them. I'm wondering what other managed vulnerability scanners ya'll are working with out there and how you like working with them. If this should be posted somewhere else please let me know.
Thanks
Tenable IO - From the team who make Nessus
Rapid7 Nexpose - From the team who makes Metasploit
We have been doing a PoC of Rapid7's (same company who make Metasploit) InsightVM. I have been very impressed with it. Not only will scan the network, but can install agents on devices so that they can be monitored even when off the network, such as end user devices.
Can set up Remediation Projects, which allow you to track the work done towards remediating specific vulnerabilities or types.
Will also integrate into Jira or ServiceNow to allow creating tickets for vulnerabilities to ensure someone picks it up.
They also have Insight AppSec which will allow scanning of websites/webapps for vulnerabilities.
We are currently using RocketCyber but now that Kaseya has bought them they have already went down the tubes. Looking at BlackPoint Cyber.