Rapid7 InsightVM vs Tenable Vulnerability Management comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Rapid7 InsightVM and Tenable Vulnerability Management based on real PeerSpot user reviews.

Find out in this report how the two Risk-Based Vulnerability Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Rapid7 InsightVM vs. Tenable Vulnerability Management Report (Updated: March 2024).
763,955 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"One of the most valuable features is it's graphical dashboard feature. It is quite easy to manage the widgets, and we can customize those according to our queries.""The most valuable feature for us is the different types of reporting it provides.""The most valuable feature for me is the risk calculation based on monthly effects.""There are many integrations with things like the VMware NSX that are great, the reporting is really solid.""This solution is much more user-friendly than past solutions I have used.""I liked the dashboard on it. I could customize my dashboard with different widgets and different heat maps.""The most valuable features of Rapid7 InsightVM are the accurate level of scanning and the workflows are good.""The performance is good."

More Rapid7 InsightVM Pros →

"The product is easy to use.""The solution is very simple to use.""The vulnerability management itself is the most valuable feature as well as references to the mitigation techniques.""It is a stable solution. Stability-wise, I rate the solution a ten out of ten.""The interface is fine.""The solution creates vulnerability tickets within the VM profile but should also include them under the Remediation tab so the fixes can be viewed in the ticketing queue.""The best feature of the solution is the amount of visibility it provides of the vulnerabilities.""The most valuable feature for me is container scanning because I am interested in CICD security."

More Tenable Vulnerability Management Pros →

Cons
"It would be nice to have an additional feature that would provide reports on who has logged onto the console or who did what on the console.""The product does not have the capability to do dynamic scanning of non-web applications.""There was functionality present previously, however, currently, we can't integrate directly with Jira Service Desk - only the cloud version.""There is a significant learning curve, that non-technical individuals, especially those not specialized in computer science or the information security industry, might face.""There is room for improvement on its cloud side. In the next release I would like to see better reporting.""The solution needs to improve its vulnerability design to include CVC results.""There should be containerization within the VM.""I would like to see more integration."

More Rapid7 InsightVM Cons →

"The price could be lower.""I'd like to see them improve their support.""The solution’s pricing could be improved.""The product could be easier to set up on the cloud.""The one drawback that we have found is the reports.""I would like the solution to cover the whole cycle of mitigation since it's an area where the solution currently lacks.""The shortcoming of the solution that needs improvement is related to its capability to do vulnerability assessments on applications.""Users get confused between VPR and CVSS ratings."

More Tenable Vulnerability Management Cons →

Pricing and Cost Advice
  • "The price of the solution is less than the competitors."
  • "I do not have experience with the pricing of the solution."
  • "This solution is expensive, but it's fine for us as we have an open budget for security solutions. Protection and having the system secured is more important."
  • "The license is IP based. How many IPs you are using to scan is the amount of the license you have to buy. The number of users doesn't matter; many users can use it or only person. It depends on the culture of the organization."
  • "Our licensing costs are somewhere around $40,000 annually. There are no additional fees."
  • "The licensing is asset-based and very straightforward."
  • "Its price is too high. My only concern or issue with Rapid7 is its pricing."
  • "Comparing the price with the value that we receive, I am not happy with it."
  • More Rapid7 InsightVM Pricing and Cost Advice →

  • "There are additional features that can be licensed for an additional cost."
  • "The solution is not too expensive."
  • "Tenable.io Vulnerability Management's pricing solution model isn't great."
  • "The total cost we pay for this solution is over 45K. This is for a large education organization."
  • "Compared to other VM solutions, Tenable.io Vulnerability Management is expensive."
  • "On a scale of one to ten, where one is low, and ten is high price, I rate the pricing an eight. So, it is a pretty expensive solution."
  • "Tenable.io is not known for being a cheap product."
  • "A yearly payment has to be made toward the solution's licensing costs."
  • More Tenable Vulnerability Management Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.
    763,955 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. You can easily prioritize vulnerabilities using attacker analytics. Overall, Rapid7… more »
    Top Answer:The remediation project is a pretty effective because it allows us, as clients or countries, to choose specific assets and set limitations on them for a certain period which allows us to track and… more »
    Top Answer:The solution's license costs around $30 per month. It is less expensive compared to other competitors.
    Top Answer: Tenable Nessus is a vulnerability assessment solution that is both easy to deploy and easy to manage. The design of the program is such that if a company should desire to handle the installation… more »
    Top Answer:I would rate Tenable's dashboards and reporting capabilities for illustrating security posture a nine out of ten, with ten being the best.
    Top Answer:It's a fantastic product, but there are some things to consider. One is the price. Compared to on-prem solutions, the SaaS model can be expensive. Price is definitely a concern and needs improvement… more »
    Ranking
    Views
    6,402
    Comparisons
    4,174
    Reviews
    20
    Average Words per Review
    351
    Rating
    8.2
    Views
    11,865
    Comparisons
    9,490
    Reviews
    25
    Average Words per Review
    469
    Rating
    8.3
    Comparisons
    Also Known As
    InsightVM, NeXpose
    Tenable.io
    Learn More
    Overview

    Rapid7 InsightVM is a comprehensive vulnerability management platform that protects your systems from attackers and is easy to scale. The solution provides easy access to vulnerability management, application security, detection and response, external threat intelligence, orchestration and automation, and more. Rapid7 InsightVM is ideal for security, IT, and DevOps teams, helping them reduce risk by enabling them to detect and respond to attacks quickly.

    Rapid7 InsightVM Features

    Rapid7 InsightVM has many valuable key features. Some of the most useful ones include:

    • Automated containment: With this feature, you can decrease exposure from vulnerabilities by automatically implementing temporary (or permanent) compensating controls via your network access control (NAC) systems, firewalls, and endpoint detection and response tools.
    • Policy assessment: Rapid7 InsightVM offers pre-built scan templates for common compliance requirements. The solution helps you take clear, actionable steps to compliance once you have assessed your risk posture. In addition, Rapid7 InsightVM’s Custom Policy Builder allows you to modify existing benchmarks or create new policies from scratch.
    • REST API: Rapid7 InsightVM REST API is easy to use and was built to easily automate virtually any aspect of vulnerability management, from data collection to risk analysis.
    • Live dashboards: Rapid7 InsightVM includes dashboards that are live and interactive by nature. The live dashboards enable you to create custom cards and full dashboards for anyone in your organization and allow you to track progress of your security program.
    • Automation-assisted patching: Rapid7 InsightVM’s automation-assisted patching gives you the autonomy to make key decisions in your patching process, such as your approval to apply certain patches to certain vulnerabilities.
    • Real risk prioritization: Rapid7 InsightVM makes it simple to know which vulnerabilities need to be prioritized and where your riskiest assets lie.
    • Goals and SLA’s: This feature enables you to make and track progress toward your goals and service level agreements (SLAs) at an appropriate pace.

    Rapid7 InsightVM Benefits

    There are many benefits to implementing Rapid7 InsightVM. Some of the biggest advantages the solution offers include:

    • Attack surface monitoring for maintained visibility: By leveraging attack surface monitoring with Project Sonar (a Rapid7 research project that regularly scans the internet to gain insights into global exposure to common vulnerabilities), you can gain more control of all of your external-facing assets, both known and unknown.
    • Container security: Rapid7 InsightVM integrates with your CI/CD tools, public container repositories, and private repositories to assess container images for vulnerabilities during the build process even before they are deployed.
    • Lightweight endpoint agent: Rapid7 InsightVM unifies data so you only need to install a single agent for continuous vulnerability assessment, incident detection, and log data collection.
    • Easily assign and track remediation duties: Using Rapid7 InsightVM, IT and security teams can assign as well as track remediation duties without having to deal with remediation reports, complex spreadsheets, or back-and-forth email tags.
    • Integration with cloud services and virtual infrastructure: Rapid7 InsightVM provides full visibility into risk across your physical, virtual, and cloud infrastructure.
    • Integrated threat feeds: Rapid7 InsightVM is designed with integrated threat feeds, giving you a dynamic view that shows you which threats are most relevant to your environment, enabling you to better protect against current, impending threats so you can react quickly to critical vulnerabilities.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by PeerSpot users currently using the Rapid7 InsightVM solution.

    An owner at a tech services company says, "I liked the dashboard on it. I could customize my dashboard with different widgets and different heat maps."

    PeerSpot user Kimeang S., Technical Consultant at Yip Intsoi, mentions, "The most important aspect of the solution is that it rarely gives false positives, especially compared to other products. It provides very clear reports for our IT teams to look at."

    A Director of Information Technology at a government explains, "The main functionality of identifying item endpoints that weren't properly patched or had vulnerabilities is the solution's most valuable feature."

    Managed in the cloud and powered by Tenable Nessus, Tenable Vulnerability Management (formerly Tenable.io) provides the industry's most comprehensive vulnerability coverage with real-time continuous assessment of your organization. Built-in prioritization, threat intelligence and real-time insight help you understand your exposures and proactively prioritize remediations.

    Sample Customers
    ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
    Global Payments AU/NZ
    Top Industries
    REVIEWERS
    Computer Software Company17%
    Financial Services Firm13%
    Comms Service Provider10%
    Energy/Utilities Company10%
    VISITORS READING REVIEWS
    Educational Organization32%
    Computer Software Company11%
    Financial Services Firm7%
    Manufacturing Company6%
    REVIEWERS
    Security Firm25%
    Manufacturing Company13%
    Financial Services Firm13%
    Computer Software Company13%
    VISITORS READING REVIEWS
    Educational Organization23%
    Computer Software Company12%
    Government9%
    Financial Services Firm8%
    Company Size
    REVIEWERS
    Small Business44%
    Midsize Enterprise20%
    Large Enterprise35%
    VISITORS READING REVIEWS
    Small Business15%
    Midsize Enterprise42%
    Large Enterprise43%
    REVIEWERS
    Small Business51%
    Midsize Enterprise3%
    Large Enterprise46%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise32%
    Large Enterprise51%
    Buyer's Guide
    Rapid7 InsightVM vs. Tenable Vulnerability Management
    March 2024
    Find out what your peers are saying about Rapid7 InsightVM vs. Tenable Vulnerability Management and other solutions. Updated: March 2024.
    763,955 professionals have used our research since 2012.

    Rapid7 InsightVM is ranked 4th in Risk-Based Vulnerability Management with 26 reviews while Tenable Vulnerability Management is ranked 2nd in Risk-Based Vulnerability Management with 28 reviews. Rapid7 InsightVM is rated 8.0, while Tenable Vulnerability Management is rated 8.2. The top reviewer of Rapid7 InsightVM writes "A single pane of glass with good functionality, and is easy to manage". On the other hand, the top reviewer of Tenable Vulnerability Management writes "Though it is scalable and has an easy setup phase in place, the solution is an expensive one ". Rapid7 InsightVM is most compared with Tenable Nessus, Qualys VMDR, Tenable Security Center, Microsoft Defender Vulnerability Management and Arctic Wolf Managed Risk, whereas Tenable Vulnerability Management is most compared with Tenable Security Center, Tenable Nessus, Qualys VMDR, Microsoft Defender Vulnerability Management and Orca Security. See our Rapid7 InsightVM vs. Tenable Vulnerability Management report.

    See our list of best Risk-Based Vulnerability Management vendors.

    We monitor all Risk-Based Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.