What Claude (Anthropic) with web search answered for vulnerability scanning tools (small businesses) on 2026-09-14

Claude (Anthropic) with web search claude-opus-5 asked 2026-09-14

Coverage: Claude (Anthropic) with web search. Other engines not included.

The question asked, verbatim: best vulnerability scanning tools for small businesses

Brands named, in the order the engine gave

1. Intruder recommended
   Intruder - My default pick for a typical small business.
2. Microsoft Defender recommended
   Microsoft Defender Vulnerability Management - If you're already on Microsoft 365, this is the cheapest path to real coverage: $3/user/month standalone, $2/user/month as an add-on if you have Defender for Endpoint P2, and free if you're on M365 E5.
3. Defender recommended
   Microsoft Defender Vulnerability Management - If you're already on Microsoft 365, this is the cheapest path to real coverage: $3/user/month standalone, $2/user/month as an add-on if you have Defender for Endpoint P2, and free if you're on M365 E5.
4. Microsoft 365 recommended
   Microsoft Defender Vulnerability Management - If you're already on Microsoft 365, this is the cheapest path to real coverage: $3/user/month standalone, $2/user/month as an add-on if you have Defender for Endpoint P2, and free if you're on M365 E5.
5. Tenable Nessus recommended
   Tenable Nessus - The industry standard for network scanning, and what an auditor or client security questionnaire will recognize.
6. Nessus Essentials recommended
   Start with Nessus Essentials (free, 16 IPs) to learn the tool or cover a tiny footprint;
7. Nessus Professional recommended
   step up to Nessus Professional (~$3,990/yr per scanner, unlimited IPs) when you need compliance templates and real coverage.
8. Qualys recommended
   Qualys (VMDR / Community Edition) - Worth a quote because entry pricing can land low (roughly $295-$1,995/yr depending on endpoints) before jumping to ~$3,400+/yr for full VMDR.
9. OpenVAS / Greenbone recommended
   OpenVAS / Greenbone - The free, open-source option.
10. Rapid7 InsightVM mentioned
    Also worth knowing: Rapid7 InsightVM is the one to look at if you have an MSP or help desk and want findings to flow into existing ticket queues, but it's usually overkill at small-business scale.
11. NinjaOne mentioned
    - Best Vulnerability Scanning Tools: Top 5 in 2026 - NinjaOne (https://www.ninjaone.com/blog/vulnerability-scanning-tools/)

Sources the engine cited

The answer, as recorded

Here's what I'd actually recommend, roughly in the order I'd try them: **1. Intruder** - My default pick for a typical small business. It's a SaaS external/internal scanner built for teams without a security person: you point it at your public IPs and domains, it scans continuously, and it filters out the noise so you get a short list of things that actually matter. Plans start around $119/mo (Essential), $239 (Cloud), $399 (Pro), plus a per-target fee - the pricing page uses a slider, so get a quote for your target count. 14-day free trial. ([intruder.io/pricing](https://www.intruder.io/pricing), [intruder.io blog](https://www.intruder.io/blog/the-top-vulnerability-scanning-tools)) **2. Microsoft Defender Vulnerability Management** - If you're already on Microsoft 365, this is the cheapest path to real coverage: $3/user/month standalone, $2/user/month as an add-on if you have Defender for Endpoint P2, and free if you're on M365 E5. It scans the laptops and servers you already manage and ties findings to patching. Nothing beats it on price-per-value when you're in the Microsoft ecosystem. ([microsoft.com pricing](https://www.microsoft.com/en-us/security/business/threat-protection/microsoft-defender-vulnerability-management-pricing)) **3. Tenable Nessus** - The industry standard for network scanning, and what an auditor or client security questionnaire will recognize. Start with **Nessus Essentials** (free, 16 IPs) to learn the tool or cover a tiny footprint; step up to **Nessus Professional** (~$3,990/yr per scanner, unlimited IPs) when you need compliance templates and real coverage. Best fit if you have on-prem servers and compliance pressure. ([esecurityplanet.com](https://www.esecurityplanet.com/networks/vulnerability-scanning-tools/), [getastra comparison](https://www.getastra.com/pentest-compare/qualys-vs-tenable)) **4. ManageEngine Vulnerability Manager Plus** - The one I'd name if you want scanning *and* patching in a single workflow rather than a scanner that just hands you a to-do list. Good value, has a free tier for small endpoint counts, and it's a practical fit for a one-person IT shop. ([ninjaone.com](https://www.ninjaone.com/blog/vulnerability-scanning-tools/)) **5. Qualys (VMDR / Community Edition)** - Worth a quote because entry pricing can land low (roughly $295-$1,995/yr depending on endpoints) before jumping to ~$3,400+/yr for full VMDR. Strong cloud-based agent model, no scanner appliance to babysit. More enterprise-shaped than the others, so it can feel heavy. ([getastra comparison](https://www.getastra.com/pentest-compare/qualys-vs-tenable)) **6. OpenVAS / Greenbone** - The free, open-source option. Coverage is genuinely broad (tens of thousands of checks), but you pay in setup time and tuning, and the output is noisy. Only pick this if you have someone technical who enjoys this work - otherwise the "free" tool costs more than Intruder in hours. ([esecurityplanet.com](https://www.esecurityplanet.com/networks/vulnerability-scanning-tools/)) **Also worth knowing:** Rapid7 InsightVM is the one to look at if you have an MSP or help desk and want findings to flow into existing ticket queues, but it's usually overkill at small-business scale. ([intruder.io blog](https://www.intruder.io/blog/the-top-vulnerability-scanning-tools)) **If you want one sentence:** Turn on Defender Vulnerability Management if you're on Microsoft 365 (cheap, covers your endpoints), and add Intruder for your internet-facing stuff - that combination covers most small businesses for well under $200/month. Sources: - [Intruder Pricing](https://www.intruder.io/pricing) - [8 Top Vulnerability Scanning Tools for 2026 - Intruder](https://www.intruder.io/blog/the-top-vulnerability-scanning-tools) - [Microsoft Defender Vulnerability Management Pricing](https://www.microsoft.com/en-us/security/business/threat-protection/microsoft-defender-vulnerability-management-pricing) - [7 Best Vulnerability Scanning Tools & Software in 2026 - eSecurityPlanet](https://www.esecurityplanet.com/networks/vulnerability-scanning-tools/) - [Tenable vs Qualys: Features + Pricing Comparison - Astra](https://www.getastra.com/pentest-compare/qualys-vs-tenable) - [Best Vulnerability Scanning Tools: Top 5 in 2026 - NinjaOne](https://www.ninjaone.com/blog/vulnerability-scanning-tools/)

Markdown edition · the question page, with every recording · Answer Watch · AEO Watch

Answer Watch records what one AI answer engine said on one date, nothing more. Each page names the engine and the model, carries the date the question was asked, and lists the brands that appeared in the answer in the order the engine gave them, with the sources it cited. It is a measurement, not a ranking, not a recommendation and not a claim about the world. Brands that did not appear in an answer are not named on any public page. Coverage: Claude (Anthropic) with web search. Other engines not included.