VulScan Pros and Cons

Love that VulScan doesn't charge by IP's scanned, #1. The fact you can easily do a portable scanner - huge for us for our discovery process. Easier to use than the big name products. Review collected by and hosted on G2.com.

Downside for us is the bulk pricing. Would be nice to be able to buy in smaller chunks to get ramped up to a higher client count. Reporting could be a little stronger, but seems to be getting better. I like more "raw" or "sortable" data, that I can clean up before discussing with a client. Review collected by and hosted on G2.com.

Love not only the depth of the information provided but the remediation and helpful non-techie descriptions help continue to sell the need for the changes up the chain of command Review collected by and hosted on G2.com.

The installation can be very difficult, at times the documentation likes behind reality. However, the helpdesk is very supportive of issues and can help point you in the right direction, but it is still more of a self discovery Review collected by and hosted on G2.com.

The details the scans provide give you what you need to fix the solution. You can also mark known issues as accepted or, on a rare occasion, a false positive can be drawn not to appear again. Review collected by and hosted on G2.com.

Honestly, I don't think there is anything I don't like with Vulcan. It provides me with everything I need. If I had to choice something, a more detailed log would be ideal. Review collected by and hosted on G2.com.

Understand risks in the environment and use the information to remediate vulnerabilities. The interface is nice and shows the results clearly on your dashboard. Review collected by and hosted on G2.com.

I believe it would be better if the Discovery Agents for devices that are not on the network (endpoints and servers), sent their logs/vulnerabilities to the internal or external Scanner, along with those already collected by it. Review collected by and hosted on G2.com.

I'm using VulScan as one of the tools in my Pentest "kit".

Adding the granular detail VulScan provides, has increased our clients' satisfaction during the active phase of our pentests. Providing them Technician-level access once we wrap up the active phase provides them the ability to check down the vulnerabilities allowing them to confirm/deny/mitigate the findings, etc.

I'm liking it a lot and the clients seem to as well, once I get them over the initial scare of the high-volume of hits in their environment. Review collected by and hosted on G2.com.

Scanning is painfully slow, even when dropping the IVS on a dedicated machine with significant horsepower... it may take 3-6 hours for just a couple of /24's, and often seems to hang on the last IP in the range, at 99%, for several hours. Painful to watch!

It seems there are consistent false positives that I've learned and see every time... such as "Trojans"... just because a few ports associated with common products are present. I think a single criteria shouldn't trigger an event... but needs to corroborate with another in order to be considered "intelligence" v. "information". Review collected by and hosted on G2.com.

Easy process to conduct the scans and an automated reporting process.

Reports are professional and ready to present to the client.

Detect out of date applications. Review collected by and hosted on G2.com.

Application detection is improving and additions to include third party applications will be released soon. Review collected by and hosted on G2.com.

I like that you can schedule scans and automate ticketing. It is helpful for MSPs that you can use more than one scanner. Most vulnerability scanning tools only allow you to use once scanner at a time. Review collected by and hosted on G2.com.

It could be more consistent on vulnerability management. Sometimes the ticket numbers disappear before the actual ticket is closed. A single-pane view of active and previous tickets would be helpful. Review collected by and hosted on G2.com.

The vulnerability features are very helpful in configuring reports exactly how you need them. I really like the ability to scan internally and externally. I also prefer the web-based reporting features. Review collected by and hosted on G2.com.

The scans consume a lot of resources and time to complete. It has to be ran as a VM, which can be troublesome for smaller clients with no virtual environment. Would be nice to be see a desktop version become available. Review collected by and hosted on G2.com.

I've been using VulScan for network vulnerability management for several months now, and I'm extremely impressed with its capabilities. The software is easy to use, and the interface is intuitive and user-friendly. I appreciate the automation and false-positive management tools , which have significantly reduced the number of false positives that I encounter. The scheduling feature is also a key benefit, allowing me to automate scans and ensure the network is continuously monitored for vulnerabilities. Review collected by and hosted on G2.com.

The ability easly generate reports that flow into my QBR tool. Review collected by and hosted on G2.com.

Vulscan is a great tool, and its the ability to provide valid and easy-to-understand product reports.

We have gained time and lessened our frustration with other programs to identify the most critical variable of our clients. The integration that it gives us has allowed us to automate our scanning and reporting. Review collected by and hosted on G2.com.

Hoping that in the future, we are adding more third-party applications Review collected by and hosted on G2.com.