Tenable Nessus on HostedScan
Run Nessus from the cloud, inside your network, or as an agent on the host, all on the Professional plan, with every finding in one risk list.
Professional trials are set up by request. We reply by email with next steps.
100+
new Nessus plugins a week from Tenable, run for you with no Nessus server to host
$2,268
per year on Professional billed annually, 5 targets included
$4,790
per year, Tenable's list price for one self-hosted Nessus Professional license
The easiest way to run Nessus
Add a target and scan. HostedScan runs Nessus from Tenable's cloud, from a scanner inside your network, or from an agent on the host, and every finding lands in one risk list with owners, schedules, alerts, and audit-ready reports.
No server to run
The same Nessus plugins and findings. Scans run on Tenable's cloud scanners, scheduled and managed from HostedScan
One risk list
Nessus findings sit beside OpenVAS, Nuclei, ZAP, Nmap, and SSLyze findings with owners, acceptance, first and last seen, and health scores
Schedules, alerts, reports
Recurring scans, alerts on new findings, and evidence reports for SOC 2, ISO 27001, and PCI
One price per target
Pay for the targets you scan, however many scanners you run against them
Internal and endpoints included
Nessus scanners for internal networks and Nessus Agents for endpoints come with the plan
API and integrations
REST API and webhooks for scans and findings, plus AWS, Azure, Vanta, and Slack integrations
The Tenable Nessus scanner on the Professional plan
Nessus is the vulnerability scanner from Tenable. Tenable reports more than 319,000 plugins covering 117,000+ CVEs, more than 100 new plugins every week, and 0.32 defects per million scans. A scan discovers open ports and services on each host, then runs the plugins that apply to what it found.
On the HostedScan Professional plan, external targets are scanned from Tenable's cloud scanners with nothing to install, and scheduled from HostedScan. Nessus scanners inside your network and Nessus Agents on endpoints link to your account with a command HostedScan gives you, and every Nessus finding shows in the same risk list as OpenVAS and the other scanners.
Three ways to run Nessus
External targets:
Nessus cloud scanning. Nessus scans your public IPs, hostnames, and ranges from Tenable's cloud scanners, scheduled and managed from HostedScan. Add a target, choose Nessus, and scan. There is no server to install or patch.
Internal networks:
Nessus scanners. Run the one-line install command from the Internal Networks page on a Linux or Windows host inside the network. The scanner links to your HostedScan account, and you launch and schedule scans of internal targets from the dashboard.
Endpoints:
Nessus Agents. Install the agent on Linux or Windows with the command HostedScan gives you, or follow Tenable's installer on macOS and then run the link command. Each agent appears as a target, scans the host it runs on every day, and needs only outbound HTTPS to report.
From target to fixed finding
Add targets:
Add public IPs, hostnames, and CIDR ranges for cloud scanning. For internal hosts, install a Nessus scanner inside the network. For endpoints, install a Nessus Agent and the host appears as a target on its own.
Launch or schedule:
Run a Nessus scan on demand or on a daily, weekly, or monthly schedule from the same scan page as the other scanners. Agents scan the host they run on every day.
Work the findings:
Each finding lands in the risk list with the Nessus plugin output, CVSS score, and affected target. Assign an owner, accept a risk with a reason, and get alerted when a new finding appears on a scheduled scan.
Ready to run Nessus without hosting it?
Nessus cloud scanning, internal scanners, and Nessus Agents on the Professional plan. External scans run from Tenable's cloud with no server to install or patch.
Professional trials are set up by request. We reply by email with next steps.
Six scanners, one dashboard
Tenable Nessus plus five more scanners
Point more than one scanner at a target and work every finding from the same risk list.
Pricing
Nessus for less than a Nessus license
One Professional plan covers Nessus cloud scanning, internal scanners, and agents for 5 targets, and costs less per year than a single self-hosted Nessus Professional license at Tenable's list price.
HostedScan Professional
$2,268 / year
$189 per month billed annually, or $269 month to month. 5 targets included, extra targets from $2.50 per target per month, billed annually.
Includes Nessus cloud scanning, Nessus scanners for internal networks, Nessus Agents, the five open-source scanners, SAML SSO, white-label reports, and access controls.
Nessus Professional, self-hosted
$4,790 / year
One scanner license on a server you install, host, and patch. Cross-scan tracking, agents, and a hosted console are separate Tenable products.
Our Customers
5,000+ MSPs and IT teams who move faster
Quick Answers
Frequently asked questions
Our knowledge base contains answers to technical questions, and you can always contact us for more details on our plans, pricing, or any questions.
Get Nessus,
on the Professional plan
Nessus cloud scanning with nothing to install, plus Nessus scanners for internal networks and Nessus Agents, in the same risk list as the open-source scanners.
Professional trials are set up by request. We reply by email with next steps.