What Claude (Anthropic) with web search answered for vulnerability scanning tools (small businesses) on 2026-10-28

Claude (Anthropic) with web search claude-opus-5 asked 2026-10-28

Coverage: Claude (Anthropic) with web search. Other engines not included.

The question asked, verbatim: best vulnerability scanning tools for small businesses

Brands named, in the order the engine gave

1. Intruder recommended
   Intruder - My default recommendation for a small business with internet-facing assets (website, VPN, mail server, a few cloud VMs).
2. Nessus recommended
   Nessus Essentials - Start here if your budget is zero.
3. Nessus Essentials recommended
   Nessus Essentials - Start here if your budget is zero.
4. Nessus Professional compared
   Nessus Professional is about $4,790/year, which is usually the wrong move for an SMB versus Intruder.
5. Professional compared
   Nessus Professional is about $4,790/year, which is usually the wrong move for an SMB versus Intruder.
6. Microsoft recommended
   Microsoft Defender Vulnerability Management - If you're already a Microsoft 365 Business Premium / Defender for Endpoint shop, check this before buying anything.
7. Microsoft Defender recommended
   Microsoft Defender Vulnerability Management - If you're already a Microsoft 365 Business Premium / Defender for Endpoint shop, check this before buying anything.
8. Defender recommended
   Microsoft Defender Vulnerability Management - If you're already a Microsoft 365 Business Premium / Defender for Endpoint shop, check this before buying anything.
9. Microsoft 365 recommended
   Microsoft Defender Vulnerability Management - If you're already a Microsoft 365 Business Premium / Defender for Endpoint shop, check this before buying anything.
10. Microsoft 365 Business recommended
    Microsoft Defender Vulnerability Management - If you're already a Microsoft 365 Business Premium / Defender for Endpoint shop, check this before buying anything.
11. Microsoft 365 Business Premium recommended
    Microsoft Defender Vulnerability Management - If you're already a Microsoft 365 Business Premium / Defender for Endpoint shop, check this before buying anything.
12. Acunetix recommended
    Acunetix (Invicti) - Only if you build or run your own web app or API.
13. Invicti recommended
    Acunetix (Invicti) - Only if you build or run your own web app or API.
14. WordPress recommended
    Overkill and overpriced for a WordPress brochure site.
15. Astra Security recommended
    Astra Security - Worth a look as a middle ground: scanner plus human pentest support, popular with SMBs that need a compliance-friendly certificate (SOC 2, ISO) rather than just a tool.
16. Greenbone / OpenVAS recommended
    Greenbone / OpenVAS - The open-source option.
17. OpenVAS recommended
    Greenbone / OpenVAS - The open-source option.
18. Qualys VMDR mentioned
    Two I'd skip: Qualys VMDR (excellent platform, but ~$596/month and built for enterprise scale) and Snyk/Socket - those are code and dependency scanners, so they're only relevant if you ship software.
19. Snyk mentioned
    Two I'd skip: Qualys VMDR (excellent platform, but ~$596/month and built for enterprise scale) and Snyk/Socket - those are code and dependency scanners, so they're only relevant if you ship software.
20. Snyk/Socket mentioned
    Two I'd skip: Qualys VMDR (excellent platform, but ~$596/month and built for enterprise scale) and Snyk/Socket - those are code and dependency scanners, so they're only relevant if you ship software.

Sources the engine cited

Is one of these your site? Its page lists every recorded answer that cited it, with the questions, the pages and the dates, and carries the alert for the next citation.

The answer, as recorded

Here's what I'd actually recommend, roughly in the order I'd try them: **1. Intruder** - My default recommendation for a small business with internet-facing assets (website, VPN, mail server, a few cloud VMs). It's built for teams without a security specialist: you point it at your IPs/domains, it scans continuously, alerts you when new CVEs affect you, and the reports are clean enough to hand to a client or auditor. Essential starts around $149/month with no annual lock-in, which is the main reason it beats the enterprise tools here. Largest share of its users are small businesses. ([intruder.io](https://www.intruder.io/compare/qualys), [g2.com](https://www.g2.com/compare/qualys-was-vs-tenable-nessus-vs-intruder)) **2. Nessus Essentials** - Start here if your budget is zero. Free, scans up to 5 IPs, and it's the same scanning engine behind the most widely deployed scanner in the industry (~200k checks, very low false-positive rate). Caveat: the free tier is now a time-limited license rather than free-forever, and 5 IPs runs out fast. Nessus Professional is about $4,790/year, which is usually the wrong move for an SMB versus Intruder. ([g2.com](https://www.g2.com/compare/qualys-was-vs-tenable-nessus-vs-intruder)) **3. Microsoft Defender Vulnerability Management** - If you're already a Microsoft 365 Business Premium / Defender for Endpoint shop, check this before buying anything. It covers your laptops and servers from the agent you already have, around $2/device/month as an add-on, and it ties findings to patching. Weak on external/web app scanning, so it pairs with (not replaces) Intruder. ([peerspot.com](https://peerspot.com/products/comparisons/greenbone_vs_microsoft-defender-vulnerability-management)) **4. ManageEngine Vulnerability Manager Plus** - Best pick if your real problem is unpatched Windows machines rather than a web presence. Scanning plus automated patch deployment in one tool, with a free tier for a small number of endpoints, and priced well below the big platforms. ([fitgap.com](https://us.fitgap.com/search/vulnerability-scanner-software/small-business)) **5. Acunetix (Invicti)** - Only if you build or run your own web app or API. It's a specialist web scanner that crawls complex authenticated apps far better than general network scanners. Overkill and overpriced for a WordPress brochure site. ([fitgap.com](https://us.fitgap.com/search/vulnerability-scanner-software/small-business)) **6. Astra Security** - Worth a look as a middle ground: scanner plus human pentest support, popular with SMBs that need a compliance-friendly certificate (SOC 2, ISO) rather than just a tool. ([getastra.com](https://www.getastra.com/blog/dast/vulnerability-scanning-for-smbs/)) **7. Greenbone / OpenVAS** - The open-source option. Free to self-host and genuinely capable, but you own the VM, the tuning, and the false positives. Choose this only if you have someone technical who enjoys that work; the paid Greenbone appliance is quote-only. ([capterra.com](https://www.capterra.com/p/171380/OpenVAS/)) Two I'd skip: **Qualys VMDR** (excellent platform, but ~$596/month and built for enterprise scale) and **Snyk/Socket** - those are code and dependency scanners, so they're only relevant if you ship software. ([g2.com](https://www.g2.com/compare/intruder-vs-qualys-vmdr)) Practical shape of this: run Nessus Essentials this week to see how bad things are, then put Intruder on your external footprint permanently, and turn on Defender VM if you're already paying for it. Sources: - [https://www.intruder.io/compare/qualys](https://www.intruder.io/compare/qualys) - [https://www.g2.com/compare/qualys-was-vs-tenable-nessus-vs-intruder](https://www.g2.com/compare/qualys-was-vs-tenable-nessus-vs-intruder) - [https://www.g2.com/compare/intruder-vs-qualys-vmdr](https://www.g2.com/compare/intruder-vs-qualys-vmdr) - [https://us.fitgap.com/search/vulnerability-scanner-software/small-business](https://us.fitgap.com/search/vulnerability-scanner-software/small-business) - [https://www.getastra.com/blog/dast/vulnerability-scanning-for-smbs/](https://www.getastra.com/blog/dast/vulnerability-scanning-for-smbs/) - [https://peerspot.com/products/comparisons/greenbone_vs_microsoft-defender-vulnerability-management](https://peerspot.com/products/comparisons/greenbone_vs_microsoft-defender-vulnerability-management) - [https://www.capterra.com/p/171380/OpenVAS/](https://www.capterra.com/p/171380/OpenVAS/)

Near this answer

The same question, recorded on other dates: 2026-10-26, 2026-10-24, 2026-10-21, 2026-10-19, 2026-10-18, 2026-10-16, 2026-10-14, 2026-10-11, 2026-10-09, 2026-10-06, 2026-10-03.

vulnerability scanning tools, asked for other audiences: remote teams (asked 2026-10-28).

Other categories with a recorded answer: backup and recovery software, cloud hosting providers, compliance automation software, data loss prevention software.

Play this answer: which brand was named first?

Markdown edition · JSON record · the question page, with every recording · Answer Watch · AEO Watch

Answer Watch records what one AI answer engine said on one date, nothing more. Each page names the engine and the model, carries the date the question was asked, and lists the brands that appeared in the answer in the order the engine gave them, with the sources it cited. It is a measurement, not a ranking, not a recommendation and not a claim about the world. Brands that did not appear in an answer are not named on any public page. Coverage: Claude (Anthropic) with web search. Other engines not included.