how to use nessus to scan website authetification

What are the benefits to Tenable.io over Nessus? Which is easier to use for inexperienced users? Which is most beneficial if we are not concered with network security only application security?

The scan that we were asked to preform was this ' Credential Nessus scan of Production infrastructure (all hosts, identifying all open ports, etc).' It seems like Tenable.io would be our best option in house if we chose to move forward with doing these scans? In looking in to our options, we are being faced with some decisions we don't particularly understand. We have moved three applications already and are in the process of moving another six in the next year.

The owners of these applications have asked us for a couple particular scans.Īs a company, we are trying to decide if it would be a sound investment for us to purchase some software or hire a 3rd party security company to preform scans. The company recently hired a sysadmin previous to these application moves. This is all new stuff for our company as a whole, as we historically have just done contract work.

I work for a small software development company that has recently moved some of our web applications away from some enterprise servers/networks and started hosting them at a local data center.

How to use nessus to scan website authetification