We performed a comparison between Rapid7 Metasploit and Tenable Vulnerability Management based on real PeerSpot user reviews.
Find out in this report how the two Vulnerability Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It's not possible to do penetration testing without being very proficient in Metasploit."
"The option to generate phishing emails has proven to be very valuable in understanding the behavior of users."
"Rapid7 Metasploit is a useful product."
"The most valuable feature for us is the support for testing Linux-based web server components."
"The Search Engineering feature is good."
"The reporting on the solution is good."
"I use Rapid7 Metasploit for payload generation and Post-Exploitation."
"The solution is open source and has many small targetted penetration tests that have been written by many people that are useful. You can choose different subjects for the test, such as Oracle databases or Apache servers."
"The solution is very simple to use."
"They are on a good trajectory as a company and investing in R&D in the right ways."
"The vulnerability management itself is the most valuable feature as well as references to the mitigation techniques."
"The initial setup is not complex."
"The integration of Tenable into our security ecosystem was very good."
"It is a stable solution. Stability-wise, I rate the solution a ten out of ten."
"A new user can easily understand the workflow, even if they are creating users for other divisions and the user is a beginner."
"The initial setup is very straightforward."
"The open-source version has reporting limitations. You need to develop these capabilities yourself. Built-in reporting is an excellent feature for penetration testing, but it isn't a must-have. The solution could also cover more vulnerabilities. Metasploit has around 10,000 exploits in its library, but more is always better."
"At the time I was using it, the graphical user interface needed some improvements."
"If your company's patch is not up to date, but you have other detection or defense solutions such as endpoint detection and response and antivirus software, the product exploit may not work effectively. This is because its exploit database update process is slow and not real-time. For zero-day vulnerabilities or new security threats, relying on Rapid7 Metasploit alone may not be effective."
"Rapid7 Metasploit could be made easier for new users to learn."
"Advanced Infrastructure should be implemented in the next release for better orchestration."
"I would like to see more capabilities, more functions, and more features. More types of attack vectors."
"The solution is not user-friendly and has room for improvement."
"There are numerous outdated exploits in their database that should be updated."
"I would like the solution to cover the whole cycle of mitigation since it's an area where the solution currently lacks."
"Tenable could improve visibility into assets, including automated asset tagging. You should be able to automatically tag assets based on location, function, ownership, etc. That would help us because we spend a lot of time identifying and tagging assets by hand."
"The shortcoming of the solution that needs improvement is related to its capability to do vulnerability assessments on applications."
"The solution is a bit slow."
"There needs to be better dashboard navigation."
"It's not a user-friendly tool since it has a complicated interface."
"The product is a bit expensive."
"They need to have more dependable and faster support."
More Tenable Vulnerability Management Pricing and Cost Advice →
Rapid7 Metasploit is ranked 11th in Vulnerability Management with 18 reviews while Tenable Vulnerability Management is ranked 2nd in Vulnerability Management with 38 reviews. Rapid7 Metasploit is rated 7.6, while Tenable Vulnerability Management is rated 8.2. The top reviewer of Rapid7 Metasploit writes "Helps find vulnerabilities in a system to determine whether the system needs to be upgraded". On the other hand, the top reviewer of Tenable Vulnerability Management writes "Discovers vulnerabilities and integrates well with other solutions". Rapid7 Metasploit is most compared with Tenable Nessus, Pentera, Acunetix and Rapid7 InsightVM, whereas Tenable Vulnerability Management is most compared with Tenable Security Center, Tenable Nessus, Qualys VMDR, Amazon Inspector and Microsoft Defender Vulnerability Management. See our Rapid7 Metasploit vs. Tenable Vulnerability Management report.
See our list of best Vulnerability Management vendors.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.