vulnerability management, ranked by real usage
As of 4 November 2026, Nessus leads vulnerability management with 610 companies naming it in job postings, ahead of Qualys at 477.
As of 4 November 2026 · refreshed daily · counts move as websites, DNS and career sites are re-read.
- Leader
- Nessus · 610
- Runner-up
- Qualys · 477
- Most hiring, 90 days
- Nessus
- Highest postings per company
- ACAS
- Catalogue
- T-1.0.1-prov
Every vulnerability management we can measure
Companies naming the tool, and postings naming it in the last 90 days. Bars are relative to the leader.
| # | Tool | Companies | companies | Postings, 90 days | postings | per company |
|---|---|---|---|---|---|---|
| 1 | NessusTenable | 610 | 1,833 | 3.0 | ||
| 2 | QualysQualys | 477 | 1,065 | 2.2 | ||
| 3 | TenableTenable | 446 | 1,191 | 2.7 | ||
| 4 | ACASTenable | 373 | 1,745 | 4.7 | ||
| 5 | CVSSFIRST | 331 | 647 | 2.0 | ||
| 6 | Rapid7Rapid7 | 241 | 567 | 2.4 | ||
| 7 | Amazon InspectorAmazon Web Services | 138 | 239 | 1.7 | ||
| 8 | SCAPNIST | 132 | 585 | 4.4 | ||
| 9 | 100 | 338 | 3.4 | |||
| 10 | Tenable Security CenterTenable | 100 | 347 | 3.5 | ||
| 11 | Tenable NessusTenable | 84 | 296 | 3.5 | ||
| 12 | STIG ViewerDISA | 82 | 247 | 3.0 | ||
| 13 | OpenVASGreenbone | 48 | 100 | 2.1 | ||
| 14 | InsightVMRapid7 | 47 | 66 | 1.4 | ||
| 15 | NucleiProjectDiscovery | 31 | 46 | 1.5 | ||
| 16 | Tenable.scTenable | 31 | 53 | 1.7 | ||
| 17 | OpenSCAPRed Hat | 28 | 65 | 2.3 | ||
| 18 | NexposeRapid7 | 24 | 43 | 1.8 | ||
| 19 | TripwireFortra | 24 | 50 | 2.1 |
Compare two tools
Same data, two columns: who chooses which by size, industry and country.
Quote the sentence with the date and the link. The numbers change daily; the link always shows the current ones.
Nessus leads vulnerability management with 610 companies naming it in job postings, ahead of Qualys at 477. (Breaknorm, 4 November 2026, https://breaknorm.co/tools/category/vulnerability-management)
Read from the source, not self-reported
Every number on this page can be traced to a page we crawled or a posting we read. Full methodology →
- CatalogueBreaknorm technology catalogue T-1.0.1-prov: 6,296 tools with vendor and category, editions folded into their parent.
- CompaniesCompanies whose own postings name the tool as the team's system, any confidence. Candidate wish-lists excluded.
- 90-day postingsOpen postings first seen or posted in the last 90 days that name the tool.
- Not countedTools used by teams that do not post jobs, and companies without a career site we can read.
vulnerability management: questions
How is this ranking made?
By the number of companies whose own job postings name the tool as the team's system, from the Breaknorm technology catalogue (version T-1.0.1-prov). No vendor paid for a position and no editor chose the order.
Why is this different from review-site rankings?
Review sites rank by reviews collected. This ranks by companies hiring people to work in the tool, which is closer to seats in use. It under-counts tools used by teams that rarely post jobs.
What about product editions?
Editions and sub-products () are counted under the parent so no company is counted twice.
Can I get the companies behind a number?
Yes: click a tool, see the first 20, and sign up for the full list with verified e-mails. Counting is free.
Get the companies your way
The same data as a search, over MCP and the API, as bulk files, or pushed to you as it changes.
Every company on every tool,
ranked by what they say
Connect the MCP server, ask which companies run a tool. Start free, no card.