What Claude (Anthropic) with web search answered for vulnerability scanning tools (small businesses) on 2026-10-21

Claude (Anthropic) with web search claude-opus-5 asked 2026-10-21

Coverage: Claude (Anthropic) with web search. Other engines not included.

The question asked, verbatim: best vulnerability scanning tools for small businesses

Brands named, in the order the engine gave

1. Intruder recommended
   Intruder - my default recommendation for most small businesses.
2. Tenable Nessus mentioned
   Tenable Nessus - the industry standard for internal network scanning (servers, workstations, network gear).
3. Nessus mentioned
   Tenable Nessus - the industry standard for internal network scanning (servers, workstations, network gear).
4. Nessus Essentials recommended
   Start with Nessus Essentials, free for up to 16 IPs - for a small office that's often enough.
5. 16 IPs recommended
   Start with Nessus Essentials, free for up to 16 IPs - for a small office that's often enough.
6. Microsoft mentioned
   Microsoft Defender Vulnerability Management - check this first if you already pay for Microsoft 365 Business Premium.
7. Microsoft Defender mentioned
   Microsoft Defender Vulnerability Management - check this first if you already pay for Microsoft 365 Business Premium.
8. Defender mentioned
   Microsoft Defender Vulnerability Management - check this first if you already pay for Microsoft 365 Business Premium.
9. Microsoft 365 mentioned
   Microsoft Defender Vulnerability Management - check this first if you already pay for Microsoft 365 Business Premium.
10. Microsoft 365 Business mentioned
    Microsoft Defender Vulnerability Management - check this first if you already pay for Microsoft 365 Business Premium.
11. Microsoft 365 Business Premium mentioned
    Microsoft Defender Vulnerability Management - check this first if you already pay for Microsoft 365 Business Premium.
12. Greenbone OpenVAS mentioned
    Greenbone OpenVAS (Community Edition) - the free, open-source route.
13. OpenVAS mentioned
    Greenbone OpenVAS (Community Edition) - the free, open-source route.
14. Community Edition mentioned
    Greenbone OpenVAS (Community Edition) - the free, open-source route.
15. Astra Security mentioned
    Astra Security - pick this if your risk is mostly a web app or SaaS product, not an office network.
16. Pentest-Tools.com mentioned
    Pentest-Tools.com or HostedScan - good cheap middle ground for on-demand external scans without an annual commitment.
17. Snyk mentioned
    Snyk - only if you write and ship code.
18. Qualys VMDR mentioned
    Qualys VMDR - technically excellent and a Nessus peer, but it's quote-only with no public SMB pricing, which usually means a sales cycle and a price aimed above small business.
19. Malwarebytes mentioned
    G2's "small business vulnerability scanner" category currently ranks Malwarebytes first, with Sophos and ESET close behind (G2 (https://www.g2.com/categories/vulnerability-scanner/small-business)).
20. Nessus Professional mentioned
    - Nessus Professional Pricing 2026 (https://ethicalhacking.ai/pricing/nessus-professional-pricing)
21. Tenable Nessus Professional mentioned
    - Tenable Nessus Professional Review 2026 - ifeeltech (https://ifeeltech.com/blog/tenable-nessus-review)

Sources the engine cited

Is one of these your site? Its page lists every recorded answer that cited it, with the questions, the pages and the dates, and carries the alert for the next citation.

The answer, as recorded

## My actual shortlist **1. Intruder** - my default recommendation for most small businesses. Cloud-based, you point it at your IPs/domains and it scans external perimeter + internal + cloud, with automatic rescans when new CVEs drop. Entry pricing around **$149/month**, and ~59% of its reviewer base is small business, which tells you it's genuinely built for your size rather than down-scaled enterprise. ([G2](https://www.g2.com/compare/intruder-vs-tenable-nessus)) **2. Tenable Nessus** - the industry standard for *internal* network scanning (servers, workstations, network gear). Start with **Nessus Essentials, free for up to 16 IPs** - for a small office that's often enough. Professional is ~$3,990-4,790/year for unlimited IPs, which is a real jump, so only step up when 16 IPs stops cutting it. Caveat: it's a raw scanner, not a managed program - it hands you a long findings list and expects you to triage it. ([ethicalhacking.ai](https://ethicalhacking.ai/pricing/nessus-professional-pricing), [ifeeltech](https://ifeeltech.com/blog/tenable-nessus-review)) **3. Microsoft Defender Vulnerability Management** - check this first if you already pay for **Microsoft 365 Business Premium**. Basic vuln management is bundled into Defender for Business, so you may already own decent endpoint-level scanning and just haven't turned it on. Cheapest possible answer when it applies. **4. Greenbone OpenVAS (Community Edition)** - the free, open-source route. 160,000+ vulnerability tests and a Nessus-competitive feed, genuinely capable. The catch is you host and maintain it yourself, and false-positive triage is on you - only worth it if someone on your team actually enjoys this. ([Greenbone](https://www.greenbone.net/en/vulnerability-scanner-openvas-vs-nessus/)) **5. Astra Security** - pick this if your risk is mostly a **web app or SaaS product**, not an office network. It pairs automated DAST scanning with manual pentesting, which keeps false positives low, and it plugs into CI/CD. ([Astra](https://www.getastra.com/blog/dast/vulnerability-scanning-for-smbs/)) **6. Pentest-Tools.com or HostedScan** - good cheap middle ground for on-demand external scans without an annual commitment. Useful when you need a report for a customer or insurer a few times a year rather than continuous monitoring. ([G2](https://www.g2.com/products/pentest-tools-com/pricing)) **7. Snyk** - only if you write and ship code. It scans dependencies and containers and suggests fixes; it solves a different problem than the network scanners above, so treat it as an addition, not an alternative. **8. Qualys VMDR** - technically excellent and a Nessus peer, but it's quote-only with no public SMB pricing, which usually means a sales cycle and a price aimed above small business. Worth a call only if you have a compliance mandate that names it. ## Two honest caveats G2's "small business vulnerability scanner" category currently ranks **Malwarebytes** first, with Sophos and ESET close behind ([G2](https://www.g2.com/categories/vulnerability-scanner/small-business)). I'd discount that - those are endpoint protection products with a vulnerability-assessment feature bolted on, and the rankings reflect their huge review volume, not scanning depth. Don't buy them *as* your scanner, though they're fine antivirus. Second: for most small businesses the tool is the easy part. A scanner that produces 400 findings nobody patches is worse than a cheaper one tied to an actual monthly review habit. If no one internally owns this, skip the DIY tools entirely and buy scanning through an MSP or MDR provider - you're paying for the triage, which is the expensive part. **If you want one answer:** Intruder, plus Nessus Essentials free for your internal network. Sources: - [G2 - Intruder vs Tenable Nessus](https://www.g2.com/compare/intruder-vs-tenable-nessus) - [G2 - Vulnerability Scanner, Small Business](https://www.g2.com/categories/vulnerability-scanner/small-business) - [Nessus Professional Pricing 2026](https://ethicalhacking.ai/pricing/nessus-professional-pricing) - [Tenable Nessus Professional Review 2026 - ifeeltech](https://ifeeltech.com/blog/tenable-nessus-review) - [Greenbone - OpenVAS vs Nessus](https://www.greenbone.net/en/vulnerability-scanner-openvas-vs-nessus/) - [Astra - Vulnerability Scanning for SMBs](https://www.getastra.com/blog/dast/vulnerability-scanning-for-smbs/) - [Pentest-Tools.com pricing - G2](https://www.g2.com/products/pentest-tools-com/pricing) - [eSecurity Planet - SMB vulnerability scanners](https://www.esecurityplanet.com/networks/smb-vulnerability-scanner/)

Near this answer

The same question, recorded on other dates: 2026-10-19, 2026-10-18, 2026-10-16, 2026-10-14, 2026-10-11, 2026-10-09, 2026-10-06, 2026-10-03, 2026-10-01, 2026-09-29, 2026-09-27.

vulnerability scanning tools, asked for other audiences: remote teams (asked 2026-10-21).

Other categories with a recorded answer: backup and recovery software, cloud hosting providers, compliance automation software, data loss prevention software.

Play this answer: which brand was named first?

Markdown edition · JSON record · the question page, with every recording · Answer Watch · AEO Watch

Answer Watch records what one AI answer engine said on one date, nothing more. Each page names the engine and the model, carries the date the question was asked, and lists the brands that appeared in the answer in the order the engine gave them, with the sources it cited. It is a measurement, not a ranking, not a recommendation and not a claim about the world. Brands that did not appear in an answer are not named on any public page. Coverage: Claude (Anthropic) with web search. Other engines not included.