We compared Qualys VMDR and Rapid7 InsightVM based on our users reviews in six parameters. After reading the collected data, you can find our conclusion below:
The setup process for Qualys VMDR was considered simple and quick, with users reporting it taking anywhere from a few minutes to a couple of days. However, there were some difficulties mentioned regarding integration and data privacy. Despite these challenges, the overall feedback on the setup was positive. On the other hand, the initial setup for Rapid7 InsightVM had mixed experiences. While some users found it easy and completed it within an hour or a few hours, others faced difficulties and it took them several months, even with professional assistance. The ease of setup was generally rated between three to five out of five.
Qualys VMDR is notable for its effective prioritization system, ongoing monitoring, adaptable dashboard, and extensive vulnerability overview. On the other hand, Rapid7 InsightVM stands out for its efficient scan engine installation, precise scanning, customizable dashboards, and risk scoring.
Both Qualys VMDR and Rapid7 InsightVM have areas that could be improved. Qualys VMDR could enhance user experience and UI design, improve SLA tracking and batch prioritization, integrate with other products, and improve reporting. On the other hand, Rapid7 InsightVM needs better integration, enhanced reporting, improved user-friendliness, and stronger customer support.
The cost of setting up Qualys VMDR can differ based on required features, with reviewers finding it reasonably priced or competitive. However, there are extra charges for specific features. In contrast, Rapid7 InsightVM is generally considered to be more expensive, but some users find the pricing reasonable because of the flexibility in defining assets and sites.
Qualys VMDR is praised for its positive impact on ROI, effectively mitigating risks and enhancing cybersecurity. Nonetheless, there are apprehensions regarding rising expenses. On the other hand, Rapid7 InsightVM is highly regarded for its outstanding ROI, effectively thwarting cyber attacks and delivering substantial value. While some reviewers perceive the ROI as satisfactory, others consider it to be moderate.
The customer service for Qualys VMDR has received both positive and negative feedback. Some customers appreciate the convenience of accessing a global team and the implementation of suggested improvements. However, there are concerns about the response time and the expertise of the support personnel. In contrast, Rapid7 InsightVM's support is generally regarded as good, with well-informed technical assistance. Nonetheless, there have been instances of delayed response time.
Comparison Results
Based on the reviews, Qualys VMDR offers a simple and convenient setup process, along with a strong prioritization system and valuable features. However, it requires enhancements in user experience, integration, reporting, and pricing. On the other hand, Rapid7 InsightVM also provides an easy setup, valuable features like scan engines and customizable dashboards. It could benefit from improved integration, reporting, user-friendliness, and customer support. Qualys VMDR seems to have an advantage in prioritization and comprehensive vulnerability management, while Rapid7 InsightVM may excel in scan optimization and remediation management.
"The features that are most valuable are the identification, scan features, and the identification of vulnerabilities."
"Intuitive and easy to use."
"Technical support is great and we've never really had a problem."
"It's a good product. After the scan our internet works well. It scans our security posture."
"Technical support is fantastic."
"The most valuable feature is the ability to run different capabilities with the same agent. With only one agent, we can have EDR, vulnerability management, compliance and some basic SaaS security capabilities."
"I find the solution's dashboard interesting...The response time is fine. You can pull up reports without dragging or consuming bandwidth."
"The most valuable feature of the solution is the external channel."
"The most valuable feature for us is the different types of reporting it provides."
"The solution is automatically scheduled so it runs by itself."
"Rapid7 have a good distribution network with good support and market presence."
"It is a stable solution."
"The most important aspect of the solution is that it rarely gives false positives, especially compared to other products. It provides very clear reports for our IT teams to look at."
"One of the most valuable features is it's graphical dashboard feature. It is quite easy to manage the widgets, and we can customize those according to our queries."
"The solution is good because it has a lot of options."
"The most valuable feature for me is the risk calculation based on monthly effects."
"Certain integration factors between different options could be improved."
"Reports were lacking somewhat on the customization side."
"It is a struggle to be able to pull our report and to be able to do onboarding using automated tools."
"Qualys could be improved in its overall performance compared to other vulnerability management or scanning tools."
"This solution could be improved by extending the agent capabilities to different operating systems including Mac and Linux. We would also like the capability to easily check for vulnerability in assets in the IOTs."
"Qualys does have an on-prem solution, but it is very expensive."
"Make some minimal dashboard improvements."
"There's a need to upgrade or fix the potential vulnerability rate. Around 20,000 potential vulnerabilities were showing in Qualys VMDR, but none of the other tools showed them. When we checked, it wasn't the case. Support explained that even small issues were being counted as vulnerabilities, causing issues in our audit. So, the security features could be improved to identify vulnerabilities accurately."
"Rapid7 InsightVM, has impressive capabilities, especially when it comes to managing video equipment. However, we've noticed that Rapid7 also offers a cloud solution called CloudSec, and we don't have that. We think it would be better if InsightVM had all the features for both on-premise and cloud management."
"It would be great to have a mobile application client. Currently, you have to use a mobile web browser on a device, but it is not similar to the desktop web browser in terms of user experience. It would be nice to have a mobile application to access the platform."
"The drawback is that it is still not a fully SaaS solution, so you must deploy a console."
"Some of our customers want to be completely cloud based, and Rapid7 doesn't offer this as an option."
"We'd like the agent to cover more compliance issues."
"There is a significant learning curve, that non-technical individuals, especially those not specialized in computer science or the information security industry, might face."
"Rapid7 InsightVM could be easier to use for those who are using it for the first time."
"In terms of improvements, its price could be better. Our main issue with Rapid7 is that it is too expensive. You can only sell it to enterprise accounts. In terms of new features, Rapid7 came up with a product called InsightIDR a couple of years ago, which is a good SIEM solution. We expect that Rapid7 will work on some sort of integration between InsightVM and InsightIDR, where vulnerability or anomaly detected by InsightVM can be reported in InsightIDR in some sort of real-time. Rapid7 doesn't patch. For example, if you have a vulnerability, some products can scan and also do the patching, but Rapid7 does not do the patching. It would be nice if it can also patch."
Qualys VMDR is ranked 3rd in Risk-Based Vulnerability Management with 77 reviews while Rapid7 InsightVM is ranked 4th in Risk-Based Vulnerability Management with 55 reviews. Qualys VMDR is rated 8.2, while Rapid7 InsightVM is rated 8.0. The top reviewer of Qualys VMDR writes "Good visibility but expensive and needs better support". On the other hand, the top reviewer of Rapid7 InsightVM writes "You can scan a network, and receive recommendations to address vulnerabilities with the click of a button". Qualys VMDR is most compared with Tenable Nessus, Tenable Security Center, Microsoft Defender Vulnerability Management, Tenable Vulnerability Management and Tanium, whereas Rapid7 InsightVM is most compared with Tenable Nessus, Tenable Security Center, Microsoft Defender Vulnerability Management, Wiz and Rapid7 InsightIDR. See our Qualys VMDR vs. Rapid7 InsightVM report.
See our list of best Risk-Based Vulnerability Management vendors.
We monitor all Risk-Based Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.