What Claude (Anthropic) with web search answered for vulnerability scanning tools (small businesses) on 2026-09-21

Claude (Anthropic) with web search claude-opus-5 asked 2026-09-21

Coverage: Claude (Anthropic) with web search. Other engines not included.

The question asked, verbatim: best vulnerability scanning tools for small businesses

Brands named, in the order the engine gave

1. Intruder recommended
   Intruder - My default recommendation for most small businesses.
2. Tenable Nessus recommended
   Tenable Nessus Professional - The industry workhorse, ~$3,390/yr per scanner.
3. Tenable Nessus Professional recommended
   Tenable Nessus Professional - The industry workhorse, ~$3,390/yr per scanner.
4. Nessus Professional recommended
   Tenable Nessus Professional - The industry workhorse, ~$3,390/yr per scanner.
5. Nessus Essentials recommended
   Also worth knowing: Nessus Essentials is free for up to 16 IPs, which is a genuinely good way to find out whether you need anything more.
6. Rapid7 InsightVM compared
   Rapid7 InsightVM - Entry pricing around $175/month, cheaper than the others at the low end.
7. Qualys recommended
   Qualys VMDR - Very capable, patch management bundled in, roughly $17-33 per asset/year.
8. Qualys VMDR recommended
   Qualys VMDR - Very capable, patch management bundled in, roughly $17-33 per asset/year.
9. OpenVAS / Greenbone recommended
   OpenVAS / Greenbone Community Edition - Free and open source, ~44,000+ vulnerability checks.
10. OpenVAS / Greenbone Community Edition recommended
    OpenVAS / Greenbone Community Edition - Free and open source, ~44,000+ vulnerability checks.
11. Linux recommended
    Worth it only if you have someone who enjoys Linux administration, because setup and tuning cost real hours.
12. Microsoft 365 mentioned
    - If you're on Microsoft 365 Business Premium, you already have Defender Vulnerability Management bundled.
13. Microsoft 365 Business mentioned
    - If you're on Microsoft 365 Business Premium, you already have Defender Vulnerability Management bundled.
14. Microsoft 365 Business Premium mentioned
    - If you're on Microsoft 365 Business Premium, you already have Defender Vulnerability Management bundled.
15. Defender mentioned
    - If you're on Microsoft 365 Business Premium, you already have Defender Vulnerability Management bundled.
16. NinjaOne mentioned
    - Best Vulnerability Scanning Tools: Top 5 in 2026 - NinjaOne (https://www.ninjaone.com/blog/vulnerability-scanning-tools/)

Sources the engine cited

The answer, as recorded

Here's what I'd actually recommend, roughly in the order I'd suggest trying them: **1. Intruder** - My default recommendation for most small businesses. It's a hosted scanner (no infrastructure to run), scans your external perimeter continuously, and translates findings into plain language with a prioritized fix list rather than a 400-page CVE dump. Best fit if your stuff is mostly cloud/SaaS/web apps and nobody on staff is a security specialist. Weakest fit if you have a big internal office network to cover. **2. Tenable Nessus Professional** - The industry workhorse, ~$3,390/yr per scanner. Pick this if you have a real internal network - servers, workstations, VPN - and especially if clients or auditors are asking for scan reports. Deepest plugin coverage of anything in this price range. Downside: it hands you findings, not a remediation workflow, so someone has to own the triage. Also worth knowing: **Nessus Essentials** is free for up to 16 IPs, which is a genuinely good way to find out whether you need anything more. **3. ManageEngine Vulnerability Manager Plus** - The one I'd name if your actual problem is unpatched machines rather than exotic vulnerabilities. It combines scanning *and* patch deployment in one workflow, which for a small business without a security team is usually the difference between finding problems and actually fixing them. Has a free tier for up to 25 endpoints. **4. Rapid7 InsightVM** - Entry pricing around $175/month, cheaper than the others at the low end. Choose it if you already have a help desk or an MSP, since its strength is pushing findings into existing ticket queues so they become someone's assigned work. **5. Qualys VMDR** - Very capable, patch management bundled in, roughly $17-33 per asset/year. I list it last for small businesses only because pricing is custom-quoted, which means a sales cycle to get a number. Fine if you're already a Qualys shop. **6. OpenVAS / Greenbone Community Edition** - Free and open source, ~44,000+ vulnerability checks. Worth it only if you have someone who enjoys Linux administration, because setup and tuning cost real hours. The license is free; the labor isn't. Two things I'd add that the "best tools" lists tend to skip: - If you're a small business, your highest-value scan is usually the **external** one - what the internet can see. Start there before worrying about internal coverage. - If you're on Microsoft 365 Business Premium, you already have **Defender Vulnerability Management** bundled. Check that before buying anything. One caveat on the pricing above: most of it comes from comparison/review sites rather than vendor pages, and vendor pricing moves. Confirm current numbers directly with the vendor before budgeting. Sources: - [8 Top Vulnerability Scanning Tools for 2026 - Intruder](https://www.intruder.io/blog/the-top-vulnerability-scanning-tools) - [7 Best Vulnerability Scanning Tools & Software in 2026 - eSecurity Planet](https://www.esecurityplanet.com/networks/vulnerability-scanning-tools/) - [Best Vulnerability Scanning Tools: Top 5 in 2026 - NinjaOne](https://www.ninjaone.com/blog/vulnerability-scanning-tools/) - [Tenable vs Qualys vs Rapid7: best pick for 2026 - Luniq](https://www.luniq.io/en/resources/blog/qualys-vs-tenable-vs-rapid7-best-vulnerability-scanner-for-engineering-firms-in-2026) - [Tenable vs Qualys vs Rapid7: Vulnerability Management 2026 - Tech Insider](https://tech-insider.org/tenable-vs-qualys-vs-rapid7-2026/)

Markdown edition · the question page, with every recording · Answer Watch · AEO Watch

Answer Watch records what one AI answer engine said on one date, nothing more. Each page names the engine and the model, carries the date the question was asked, and lists the brands that appeared in the answer in the order the engine gave them, with the sources it cited. It is a measurement, not a ranking, not a recommendation and not a claim about the world. Brands that did not appear in an answer are not named on any public page. Coverage: Claude (Anthropic) with web search. Other engines not included.