What Claude (Anthropic) with web search answered for vulnerability scanning tools (small businesses) on 2026-09-29

Claude (Anthropic) with web search claude-opus-5 asked 2026-09-29

Coverage: Claude (Anthropic) with web search. Other engines not included.

The question asked, verbatim: best vulnerability scanning tools for small businesses

Brands named, in the order the engine gave

1. Intruder mentioned
   Intruder - My default pick for a small business with an internet-facing footprint and no security staff.
2. Microsoft mentioned
   Microsoft Defender Vulnerability Management - If you're already a Microsoft 365 shop, this is the cheapest credible option at $3/user/month standalone (or $2 as an add-on to Defender for Endpoint P2, and free with M365 E5).
3. Microsoft Defender mentioned
   Microsoft Defender Vulnerability Management - If you're already a Microsoft 365 shop, this is the cheapest credible option at $3/user/month standalone (or $2 as an add-on to Defender for Endpoint P2, and free with M365 E5).
4. Defender mentioned
   Microsoft Defender Vulnerability Management - If you're already a Microsoft 365 shop, this is the cheapest credible option at $3/user/month standalone (or $2 as an add-on to Defender for Endpoint P2, and free with M365 E5).
5. Microsoft 365 mentioned
   Microsoft Defender Vulnerability Management - If you're already a Microsoft 365 shop, this is the cheapest credible option at $3/user/month standalone (or $2 as an add-on to Defender for Endpoint P2, and free with M365 E5).
6. Intune mentioned
   Agentless scanning of your laptops and servers, software inventory, risk prioritisation, and it hands off patching to Intune.
7. Tenable Nessus mentioned
   Tenable Nessus Professional - The industry workhorse, ~$3,990/yr per scanner for unlimited IPs (Nessus Expert ~$5,990 adds external attack surface and cloud checks).
8. Tenable Nessus Professional mentioned
   Tenable Nessus Professional - The industry workhorse, ~$3,990/yr per scanner for unlimited IPs (Nessus Expert ~$5,990 adds external attack surface and cloud checks).
9. Nessus Professional mentioned
   Tenable Nessus Professional - The industry workhorse, ~$3,990/yr per scanner for unlimited IPs (Nessus Expert ~$5,990 adds external attack surface and cloud checks).
10. Nessus Essentials mentioned
    Nessus Essentials is free for 16 IPs - genuinely good for a micro-business or for learning.
11. Greenbone OpenVAS mentioned
    Greenbone OpenVAS (Community Edition) - Free and self-hosted, ~160,000 checks, strong on network and host-level scanning.
12. OpenVAS mentioned
    Greenbone OpenVAS (Community Edition) - Free and self-hosted, ~160,000 checks, strong on network and host-level scanning.
13. Linux mentioned
    Pick this only if you have someone comfortable running a Linux appliance;
14. Nuclei mentioned
    Pair with Nuclei (free, template-based) for web app and API surfaces - the two are complements, not substitutes.
15. Acunetix / Invicti mentioned
    Acunetix / Invicti - If your risk is concentrated in a web app or customer portal you built, a dedicated DAST scanner beats a general network scanner.
16. Invicti mentioned
    Acunetix / Invicti - If your risk is concentrated in a web app or customer portal you built, a dedicated DAST scanner beats a general network scanner.
17. Qualys mentioned
    Qualys - Capable, but no public pricing (reports range from under $300 to ~$2,000+), per-asset billing, and a sales cycle.

Sources the engine cited

The answer, as recorded

# Vulnerability scanners for small businesses The honest starting point: for most small businesses the winner isn't the most powerful scanner, it's the one that keeps running after month one without a dedicated security person. Ranked roughly in the order I'd actually suggest them: **1. Intruder** - My default pick for a small business with an internet-facing footprint and no security staff. Continuous external scanning, plain-English results, and it proactively re-scans when big new CVEs drop. Pricing is public and starts around **$101-$149/month** for a small number of targets (Essential tier), Pro from ~$163/month. The main reason it's first: the reports are written for someone who isn't a pentester, so findings actually get fixed. **2. Microsoft Defender Vulnerability Management** - If you're already a Microsoft 365 shop, this is the cheapest credible option at **$3/user/month standalone** (or $2 as an add-on to Defender for Endpoint P2, and free with M365 E5). Agentless scanning of your laptops and servers, software inventory, risk prioritisation, and it hands off patching to Intune. It covers your endpoints, not your public web apps - so it pairs with, rather than replaces, #1. **3. Tenable Nessus Professional** - The industry workhorse, ~**$3,990/yr** per scanner for unlimited IPs (Nessus Expert ~$5,990 adds external attack surface and cloud checks). Worth it if you have a real internal network to scan and someone who can interpret output, because the flat per-scanner price beats per-asset platforms at small scale. **Nessus Essentials** is free for 16 IPs - genuinely good for a micro-business or for learning. **4. ManageEngine Vulnerability Manager Plus** - Best value if you want scanning *and* patch deployment in one tool. Has a free tier for a small number of endpoints, and it's aimed at generalist IT admins rather than security specialists. **5. Greenbone OpenVAS (Community Edition)** - Free and self-hosted, ~160,000 checks, strong on network and host-level scanning. Pick this only if you have someone comfortable running a Linux appliance; the licence is free but the labour isn't. Pair with **Nuclei** (free, template-based) for web app and API surfaces - the two are complements, not substitutes. **6. Acunetix / Invicti** - If your risk is concentrated in a web app or customer portal you built, a dedicated DAST scanner beats a general network scanner. Acunetix is the more SMB-scaled end of the Invicti line. **7. Qualys** - Capable, but no public pricing (reports range from under $300 to ~$2,000+), per-asset billing, and a sales cycle. It's cost-effective at high asset counts, which is the opposite of your situation. I'd only go here if a compliance requirement or an existing vendor relationship pushes you there. One practical note: if your driver is **PCI compliance**, you specifically need an Approved Scanning Vendor for the external quarterly scan - check that before buying, since not every tool above qualifies. **My concrete recommendation:** Defender VM if you're on Microsoft 365, plus Intruder for anything exposed to the internet. That's roughly $150-200/month for a 20-person company and covers both halves of the problem. Sources: - [8 Top Vulnerability Scanning Tools for 2026 - Intruder](https://www.intruder.io/blog/the-top-vulnerability-scanning-tools) - [7 Best Vulnerability Scanning Tools & Software in 2026 - eSecurityPlanet](https://www.esecurityplanet.com/networks/vulnerability-scanning-tools/) - [Microsoft Defender Vulnerability Management Pricing](https://www.microsoft.com/en-us/security/business/threat-protection/microsoft-defender-vulnerability-management-pricing) - [Tenable vs Qualys 2026 - DecryptionDigest](https://www.decryptiondigest.com/blog/tenable-vs-qualys-vulnerability-scanner-comparison) - [OpenVAS vs ProjectDiscovery Nuclei - CyberSecTools](https://cybersectools.com/compare/greenbone-openvas-vs-projectdiscovery-nuclei) - [6 Best Open-Source Vulnerability Scanners in 2026 - TuxCare](https://tuxcare.com/blog/open-source-vulnerability-scanner/) - [Qualys vs Tenable for PCI ASV Scanning](https://www.pcicompliance.com/qualys-vs-tenable-pci/) - [10 Best Vulnerability Scanning Tools in 2026 - Invicti](https://www.invicti.com/blog/web-security/10-best-vulnerability-scanning-tools)

Near this answer

The same question, recorded on other dates: 2026-09-27, 2026-09-25, 2026-09-23, 2026-09-21, 2026-09-16, 2026-09-14, 2026-09-13, 2026-09-11, 2026-09-08.

vulnerability scanning tools, asked for other audiences: remote teams (asked 2026-09-29).

Other categories with a recorded answer: backup and recovery software, cloud hosting providers, compliance automation software, data loss prevention software.

Markdown edition · JSON record · the question page, with every recording · Answer Watch · AEO Watch

Answer Watch records what one AI answer engine said on one date, nothing more. Each page names the engine and the model, carries the date the question was asked, and lists the brands that appeared in the answer in the order the engine gave them, with the sources it cited. It is a measurement, not a ranking, not a recommendation and not a claim about the world. Brands that did not appear in an answer are not named on any public page. Coverage: Claude (Anthropic) with web search. Other engines not included.