What Claude (Anthropic) with web search answered for vulnerability scanning tools (small businesses) on 2026-10-19

Claude (Anthropic) with web search claude-opus-5 asked 2026-10-19

Coverage: Claude (Anthropic) with web search. Other engines not included.

The question asked, verbatim: best vulnerability scanning tools for small businesses

Brands named, in the order the engine gave

1. Intruder recommended
   Intruder - the default pick for most small businesses.
2. Nessus recommended
   Nessus Essentials (free) → Nessus Professional.
3. Nessus Essentials recommended
   Nessus Essentials (free) → Nessus Professional.
4. Nessus Professional recommended
   Nessus Essentials (free) → Nessus Professional.
5. Professional recommended
   Nessus Essentials (free) → Nessus Professional.
6. 16 IPs recommended
   Essentials is free but capped at 16 IPs - genuinely enough for a small office or a handful of servers, and the best zero-cost way to learn what's actually broken on your network.
7. Greenbone OpenVAS recommended
   Greenbone OpenVAS Community Edition - best free option with no host cap.
8. Greenbone OpenVAS Community Edition recommended
   Greenbone OpenVAS Community Edition - best free option with no host cap.
9. OpenVAS recommended
   Greenbone OpenVAS Community Edition - best free option with no host cap.
10. Community Edition recommended
    Greenbone OpenVAS Community Edition - best free option with no host cap.
11. Astra Security recommended
    Astra Security - if you want results interpreted for you.
12. Snyk recommended
    Snyk - if you write software.
13. Malwarebytes recommended
    Your endpoint vendor's built-in scanner (Malwarebytes, Sophos, ESET).
14. G2 recommended
    Malwarebytes currently tops G2's small-business category on review volume.
15. Qualys VMDR mentioned
    Who I'd skip: Qualys VMDR (~$199/asset/year) and Rapid7 InsightVM (512-asset minimum, ~$11k-15k/year at 500 assets).
16. Rapid7 mentioned
    Who I'd skip: Qualys VMDR (~$199/asset/year) and Rapid7 InsightVM (512-asset minimum, ~$11k-15k/year at 500 assets).
17. Rapid7 InsightVM mentioned
    Who I'd skip: Qualys VMDR (~$199/asset/year) and Rapid7 InsightVM (512-asset minimum, ~$11k-15k/year at 500 assets).

Sources the engine cited

The answer, as recorded

Here's what I'd actually recommend, roughly in the order I'd try them: **1. Intruder - the default pick for most small businesses.** Cloud-based external scanning with almost no setup: point it at your domains/IPs and cloud accounts, and it continuously re-scans when new vulnerabilities drop. It's built for teams without a security person, and it prioritizes aggressively so you don't drown in findings. Entry plans run ~$99-$149/month, which is the most realistic price point on this list. **2. Nessus Essentials (free) → Nessus Professional.** The industry-standard scanner with the biggest plugin library (200,000+). Essentials is free but capped at **16 IPs** - genuinely enough for a small office or a handful of servers, and the best zero-cost way to learn what's actually broken on your network. The jump to Professional is steep (~$3,990-$4,390/year), so treat that as the moment you've outgrown free tooling. **3. Greenbone OpenVAS Community Edition - best free option with no host cap.** ~160,000 tests, $0, unlimited hosts. The tradeoff is you run and maintain it yourself (Docker/VM), and the UI and reporting are rougher. Good if you have someone technical and more than 16 IPs to cover. **4. Astra Security - if you want results interpreted for you.** Automated scanning plus human-assisted pentesting and compliance-ready reports (SOC 2, ISO, PCI). Worth it specifically when a customer or auditor is asking for evidence, not just when you want to find bugs. **5. Snyk - if you write software.** Free tier is generous, scans your dependencies and code, and opens pull requests with fixes. This covers a completely different attack surface than the network scanners above; if you ship a product, you want both. **6. Your endpoint vendor's built-in scanner (Malwarebytes, Sophos, ESET).** Unglamorous, but if you already pay one of these for endpoint protection, their vulnerability/patch modules cover unpatched workstation software - the thing that actually gets small businesses compromised. Malwarebytes currently tops G2's small-business category on review volume. **Who I'd skip:** Qualys VMDR (~$199/asset/year) and Rapid7 InsightVM (512-asset minimum, ~$11k-15k/year at 500 assets). Both are excellent, both are priced and architected for organizations with a dedicated security team. **Practical advice:** start with Nessus Essentials or OpenVAS to find out how bad things are, then buy Intruder if you want it to keep happening automatically without you remembering. Scanning is the cheap part - budget your real effort for actually patching what it finds. Sources: - [Intruder - top vulnerability scanning tools](https://www.intruder.io/blog/the-top-vulnerability-scanning-tools) - [Astra - Vulnerability Scanning for SMBs 2026](https://www.getastra.com/blog/dast/vulnerability-scanning-for-smbs/) - [G2 - Vulnerability Scanner, Small Business](https://www.g2.com/categories/vulnerability-scanner/small-business) - [eSecurity Planet - Best SMB Vulnerability Scanning Tools](https://www.esecurityplanet.com/networks/smb-vulnerability-scanner/) - [Nessus vs OpenVAS comparison](https://cipherssecurity.com/nessus-vs-openvas/) - [Datamation - OpenVAS vs Nessus](https://datamation.com/security/openvas-vs-nessus) - [Intruder vs Nessus pricing (GetApp)](https://www.getapp.com/security-software/a/intruder/compare/nessus/) - [Qualys pricing 2026](https://beaglesecurity.com/blog/article/qualys-pricing.html) - [Rapid7 InsightVM pricing](https://rapid7.com/products/insightvm/pricing)

Near this answer

The same question, recorded on other dates: 2026-10-18, 2026-10-16, 2026-10-14, 2026-10-11, 2026-10-09, 2026-10-06, 2026-10-03, 2026-10-01, 2026-09-29, 2026-09-27, 2026-09-25.

vulnerability scanning tools, asked for other audiences: remote teams (asked 2026-10-19).

Other categories with a recorded answer: backup and recovery software, cloud hosting providers, compliance automation software, data loss prevention software.

Markdown edition · JSON record · the question page, with every recording · Answer Watch · AEO Watch

Answer Watch records what one AI answer engine said on one date, nothing more. Each page names the engine and the model, carries the date the question was asked, and lists the brands that appeared in the answer in the order the engine gave them, with the sources it cited. It is a measurement, not a ranking, not a recommendation and not a claim about the world. Brands that did not appear in an answer are not named on any public page. Coverage: Claude (Anthropic) with web search. Other engines not included.