We performed a comparison between Rapid7 Metasploit and Skybox Security Suite based on real PeerSpot user reviews.
Find out in this report how the two Vulnerability Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The reporting on the solution is good."
"I don't have any other tools like it, and I always use it when I'm doing a pen test. Metasploit is a great solution for penetration testing,"
"The solution is open source and has many small targetted penetration tests that have been written by many people that are useful. You can choose different subjects for the test, such as Oracle databases or Apache servers."
"Technical support has been helpful and responsive."
"All of the features are great."
"It's not possible to do penetration testing without being very proficient in Metasploit."
"Rapid7 Metasploit is a useful product."
"The most valuable features of the solution are the scripts, the modules, and the tools that the Rapid7 Metasploit framework has."
"Skybox deployment is simple, and it's very useful."
"It has a good policy management feature and can provide customers with good quality outputs."
"It shows me a client's or an organization's entire network. I can see everything."
"The solution's simplicity of use is its most valuable feature."
"The most valuable features are the rule compliance and the OS vulnerability checks."
"Security review is the most important feature, because it offers a single pane of glass to analyze multiple firewalls."
"Aside from Firewall Assurance, we are using Network Assurance and Change Manager for an overview of the whole network and for documenting requests and the recertification of the ruleset."
"This type of tool does a great job of reaching into those other devices producing risk recommendations, compliance recommendations, and a single plane of glass to do your queries, so you can find where these rules might exist."
"We'd like them to offer better coverage of malware."
"The solution should improve the responsiveness of its live technical support."
"I think areas with shortcomings that need improvement are more integration and automation."
"Advanced Infrastructure should be implemented in the next release for better orchestration."
"Rapid7 Metasploit could be made easier for new users to learn."
"If your company's patch is not up to date, but you have other detection or defense solutions such as endpoint detection and response and antivirus software, the product exploit may not work effectively. This is because its exploit database update process is slow and not real-time. For zero-day vulnerabilities or new security threats, relying on Rapid7 Metasploit alone may not be effective."
"Better automation capabilities would be an improvement."
"The open-source version has reporting limitations. You need to develop these capabilities yourself. Built-in reporting is an excellent feature for penetration testing, but it isn't a must-have. The solution could also cover more vulnerabilities. Metasploit has around 10,000 exploits in its library, but more is always better."
"Modifications and the deletion of existing policies are currently unavailable."
"The solution needs to add more automation and orchestration capabilities. Those features would make the solution much stronger."
"There is room for improvement in pricing. It would be better, especially if a customer bought all four modules."
"The solution does not support certain devices or vendors in some regions or countries due to regulations."
"It's expensive."
"I've had issues with licensing where, when they were expiring and I asked for the updated licenses, I would the wrong ones. I think their process needs to be straightened out a little bit - I don't know if they fixed it already, it has been awhile. It wasn't as straightforward as it could have been."
"They are not satisfied with the complexity of the solution and the price."
"Reporting. A lot of the reports, out of the box, are limited to a certain number of either configuration violations or access rule violations. So when you first set up a new firewall to be monitored by Skybox, you don't get a real full report. You have to really tweak it to get everything."
Rapid7 Metasploit is ranked 11th in Vulnerability Management with 18 reviews while Skybox Security Suite is ranked 18th in Vulnerability Management with 34 reviews. Rapid7 Metasploit is rated 7.6, while Skybox Security Suite is rated 7.8. The top reviewer of Rapid7 Metasploit writes "Helps find vulnerabilities in a system to determine whether the system needs to be upgraded". On the other hand, the top reviewer of Skybox Security Suite writes "Efficient in vulnerability management, stable and easy to use ". Rapid7 Metasploit is most compared with Tenable Nessus, Pentera, Rapid7 InsightVM, Acunetix and Nucleus, whereas Skybox Security Suite is most compared with AlgoSec, Tufin Orchestration Suite, FireMon Security Manager, Palo Alto Networks Panorama and RedSeal. See our Rapid7 Metasploit vs. Skybox Security Suite report.
See our list of best Vulnerability Management vendors.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
