No more typing reviews! Try our Samantha, our new voice AI agent.

Cato SASE Cloud Platform vs Rapid7 Metasploit comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.4
iboss improved bandwidth and security for remote work, but per-device fees and Mac agent delays prompted vendor alternatives.
Sentiment score
7.1
Cato SASE Cloud Platform reduces costs and enhances efficiency with improved reliability, optimized traffic, and decreased maintenance expenses.
Sentiment score
4.3
Rapid7 Metasploit efficiently identifies vulnerabilities and saves costs but is average for experienced users or those using Qualys/Nessus.
With iboss, whenever you turn on your laptop, the iboss agent automatically connects to the iboss cloud, enforcing all security policies. So with respect to the security side, it strengthens measures.
Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees
I have seen some cost effectiveness from iboss; it has reduced certain support requirements, making it a more hands-off solution.
Managing Director
Metasploit has helped save time, especially with testing websites or VIPD projects.
Information security engineer at Cyberisk
The ROI can be very rapid for organizations using vulnerability assessment for the first time.
Senior Security Consultant at ITSEC Asia
 

Customer Service

Sentiment score
7.8
Iboss customer service receives mixed reviews, with praise for responsiveness and criticism for communication and resolution delays.
Sentiment score
7.5
Cato SASE Cloud's customer support is responsive, efficient, 24/7, with high user satisfaction and occasional concerns about sales communication.
Sentiment score
5.9
Rapid7 Metasploit support has mixed reviews, with helpful resources but varying response times and effectiveness compared to Cisco.
They are very fast, responsive, and knowledgeable.
Head of Cybersecurity at SES Water
The quality of the support is fantastic.
Educational Technology Coordinator at a performing arts with 201-500 employees
We had promising discussions about resolving these issues, but no real action followed.
Network Administrator at a educational organization with 51-200 employees
Their knowledge portal and Cato Academy portal are excellent resources.
Product Lifecycle manager at Air Spring
Our customer service experience is excellent
Vice President at a tech services company with 1,001-5,000 employees
I think the technical support by Cato SASE Cloud Platform is quite good.
Product & Services Integrator at a comms service provider with 10,001+ employees
Rapid7 sometimes struggles with queries from non-security people, whereas Tenable is more patient.
Senior Security Consultant at ITSEC Asia
The customer support is excellent
Infrastructure patching Manager at a manufacturing company with 1,001-5,000 employees
 

Scalability Issues

Sentiment score
7.3
Iboss exhibits reliable scalability with easy resource expansion, accommodating high demand smoothly while maintaining performance and flexibility.
Sentiment score
8.0
Cato SASE Cloud Platform excels in scalability, supporting enterprises globally with efficient management and eliminating frequent hardware upgrades.
Sentiment score
5.1
Rapid7 Metasploit's scalability opinions vary, some see limitations, others appreciate flexibility; performance varies by project and infrastructure.
They are also able to meet on-demand requirements based on your contract with them, and can easily provide adequate resources and scalability.
Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees
I would rate it a nine out of ten for scalability.
If I start seeing sluggishness or anything like that, I just reach out to my rep, and they connect with their dev team, typically resolving it the same day.
Educational Technology Coordinator at a performing arts with 201-500 employees
As an MSSP, we find it scalable for end users across EPP platforms, network, and cloud sides.
Product Lifecycle manager at Air Spring
Metasploit can handle big projects and is already prepared for them.
Information security engineer at Cyberisk
Rapid7 Metasploit is highly scalable.
Infrastructure patching Manager at a manufacturing company with 1,001-5,000 employees
Rapid7 Metasploit has limited scalability based on my experience, as the customer receives the full functionality of the product with the license.
Head of Sales Services Department at a comms service provider with 51-200 employees
 

Stability Issues

Sentiment score
7.5
iboss is highly stable with 99% uptime, minor deployment challenges, and receives strong performance ratings of 7-9 out of 10.
Sentiment score
8.3
Users praise Cato SASE Cloud Platform for its stable, reliable performance, high availability, and smooth operation across global deployments.
Sentiment score
7.8
Rapid7 Metasploit's stability is highly praised, with recent versions improving and rated 8-9/10, despite occasional network issues.
It's been pretty solid; I've never had an outage with them, and if I ever had, it's only been once out of the seven years.
Educational Technology Coordinator at a performing arts with 201-500 employees
We've experienced zero downtime.
Head of Cybersecurity at SES Water
Our biggest problem with their service was it did not recognize the device despite our ClearPass sending information to the iboss box.
Network Administrator at a educational organization with 51-200 employees
I would rate the stability of the solution as ten on a scale of one to ten.
Vice President at a tech services company with 1,001-5,000 employees
I find Cato SASE Cloud Platform overall stable.
Product & Services Integrator at a comms service provider with 10,001+ employees
I have never faced any technical issues or downtimes.
Information security engineer at Cyberisk
I find Metasploit to be very stable, and I would rate its stability as a nine out of ten.
Senior Security Consultant at ITSEC Asia
 

Room For Improvement

iboss struggles with Mac support, integration issues, performance limitations, and needs improvements in security features and user configurations.
Enhancing identity integration, security features, interface, third-party compatibility, and sector-specific tools would boost Cato SASE Cloud's appeal.
Rapid7 Metasploit needs faster updates, improved tools integration, better UI, enhanced features, and updated evasion capabilities for modern defenses.
It is not as intuitive as the rest of the platform.
Head of Cybersecurity at SES Water
We also had a problem with a transition when we upgraded from one appliance of theirs to another, but their engineer lost a good deal of our data.
Network Administrator at a educational organization with 51-200 employees
Our iboss subscription access should be more secure with an OTP or VPN etc.
The platform lacks strong security features on the edge.
Product Lifecycle manager at Air Spring
To improve Cato SASE Cloud Platform, I think they sometimes need more built-in features for security in larger networks when doing local authentication.
Product & Services Integrator at a comms service provider with 10,001+ employees
While you can check the vulnerability, and the system will tell you there is no vulnerability, usually, a human can change one, two, or three parameters and using the same technique and the same scripts can break the system.
Head of Sales Services Department at a comms service provider with 51-200 employees
The database is not always updated with the latest vulnerabilities or zero-day exploits.
Information security engineer at Cyberisk
The time taken to fetch reports based on the number of events can be extensive.
Infrastructure patching Manager at a manufacturing company with 1,001-5,000 employees
 

Setup Cost

Iboss offers competitive and transparent pricing, often cheaper than Broadcom and Check Point, despite annual cost increases.
Cato SASE Cloud offers competitive, flexible bandwidth-based pricing, with user-rated cost-effectiveness and discounts through partnerships for yearly licensing.
Rapid7 Metasploit's pricing ranges from free to $20,000, with varied opinions on its affordability compared to competitors.
It offers the same features you would get from a vendor that charges 250,000 British pounds for a fraction of the price.
Head of Cybersecurity at SES Water
The following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs.
Network Administrator at a educational organization with 51-200 employees
Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern.
Managing Director
I do not find it particularly expensive, but for some companies, they may not have the budget to be at that level of security for their networks.
Product & Services Integrator at a comms service provider with 10,001+ employees
The pricing is flexible due to our special partnership with Cato Networks.
Vice President at a tech services company with 1,001-5,000 employees
The cost is approximately $15 per device.
Infrastructure patching Manager at a manufacturing company with 1,001-5,000 employees
Metasploit is cheaper than Nessus and offers a more robust community edition that provides a good experience for studying Metasploit.
Senior Security Consultant at ITSEC Asia
After that, they usually purchase the commercial part of the solution due to its deep integration with InsightVM.
Head of Sales Services Department at a comms service provider with 51-200 employees
 

Valuable Features

iboss provides advanced security features, seamless cloud management, and scalability with user-friendly integration and robust threat protection capabilities.
Cato SASE Cloud Platform enhances network performance with advanced security, traffic optimization, centralized management, and cost-effective global SD-WAN capabilities.
Rapid7 Metasploit excels in penetration testing with strong integration, comprehensive features, and efficient management in a unified platform.
The solution's mental health function can detect if someone needs help.
Head of Cybersecurity at SES Water
It's given us a lot more visibility into our computer assets that may be infected with viruses and also shows us people who have unusually large uploads or might be engaging in high-risk activities, such as searches or going to sites not categorized by their web crawler.
Educational Technology Coordinator at a performing arts with 201-500 employees
iboss was the best solution for us because, no matter what domain you were in, everything is under a single pane of glass, which is exactly what we wanted.
Managing Director
It is scalable for end users across network and cloud sides and saves operational costs.
Product Lifecycle manager at Air Spring
The single-pass architecture has improved user experience with Cato SASE Cloud Platform as it provides security teams in companies a platform where they can easily obtain information if there are breaches or security issues.
Product & Services Integrator at a comms service provider with 10,001+ employees
Rapid7 offers comprehensive features within one platform, eliminating the need to integrate multiple tools to see all alerts in one place.
Infrastructure patching Manager at a manufacturing company with 1,001-5,000 employees
InsightVM searches for potential threats and vulnerabilities of the infrastructure, and after that, Rapid7 Metasploit validates whether we can break the system using this vulnerability or threat, serving as a validator component of the InsightVM solution.
Head of Sales Services Department at a comms service provider with 51-200 employees
The most valuable features of Metasploit include its powerful capabilities for exploitation and scanning.
Information security engineer at Cyberisk
 

Categories and Ranking

iboss
Sponsored
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
21
Ranking in other categories
Secure Web Gateways (SWG) (5th), Internet Security (3rd), Web Content Filtering (1st), Cloud Access Security Brokers (CASB) (7th), ZTNA as a Service (8th), Secure Access Service Edge (SASE) (8th)
Cato SASE Cloud Platform
Average Rating
9.0
Reviews Sentiment
7.5
Number of Reviews
31
Ranking in other categories
WAN Optimization (2nd), Intrusion Detection and Prevention Software (IDPS) (11th), Cloud Access Security Brokers (CASB) (6th), Software Defined WAN (SD-WAN) Solutions (4th), WAN Edge (6th), ZTNA as a Service (7th), Secure Access Service Edge (SASE) (3rd), Remote Browser Isolation (RBI) (2nd)
Rapid7 Metasploit
Average Rating
8.0
Reviews Sentiment
6.1
Number of Reviews
22
Ranking in other categories
Vulnerability Management (26th)
 

Mindshare comparison

Secure Access Service Edge (SASE) Mindshare Distribution
ProductMindshare (%)
Cato SASE Cloud Platform9.4%
Prisma Access by Palo Alto Networks10.8%
Zscaler Zero Trust Exchange Platform9.1%
Other70.69999999999999%
Secure Access Service Edge (SASE)
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Rapid7 Metasploit1.7%
Wiz5.5%
Qualys VMDR4.4%
Other88.4%
Vulnerability Management
 

Featured Reviews

Ashok Ananthula - PeerSpot reviewer
Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees
Cloud gateway has strengthened remote web security and now needs better Mac and ISP support
The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.
reviewer2697738 - PeerSpot reviewer
Product & Services Integrator at a comms service provider with 10,001+ employees
Cloud security has unified global network design and has simplified threat visibility
I think all of the functionalities, such as the secure web gateway feature, are quite good. I also believe Cato SASE Cloud Platform is one of the only solutions that has not only a software firewall solution but also a physical software solution where you can change the company's firewalls and put in sockets from Cato SASE Cloud Platform, which I see as an advantage for them. The single-pass architecture has improved user experience with Cato SASE Cloud Platform as it provides security teams in companies a platform where they can easily obtain information if there are breaches or security issues. I assess the benefit of integrating WAN optimization as good. There is ease in making rules between WAN optimization, especially when it comes to global connections because of all their points of presence that are spread over the world. I think the real-time threat protection of Cato SASE Cloud Platform is also good. Their points of presence are quite efficient, and I do not see any delays in that area.
reviewer1247523 - PeerSpot reviewer
Head of Sales Services Department at a comms service provider with 51-200 employees
Extensive exploit database and seamless integration enhance penetration testing capabilities
The automated approach in the audits or in the hacking testing with Rapid7 Metasploit could be improved because even the same attack you provide today will go in different ways another day. I prefer when the auditor or pen-tester provides the attack in a non-automated mode. For some, it might be a valuable option, but I'm not sure it's valuable for us, as after the attack has been provided, we should release a report detailing how it transpired and what the customer should improve to block this way of attack. If the attack was provided in an automated mode, you cannot receive sufficient information that helps with this final report for the customer. While you can check the vulnerability, and the system will tell you there is no vulnerability, usually, a human can change one, two, or three parameters and using the same technique and the same scripts can break the system. Rapid7 Metasploit could be improved in areas concerning the experience with finding particular scripts pre-installed in the solution. Customers, administrators, and pen-testers spend considerable time trying to locate the specific component they need by the name of the technique or the name of the attack, so any improvements in making it easier to find those predefined components by name or timeframe would be beneficial. Search filters could be a correct improvement.
report
Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.
890,088 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
9%
Manufacturing Company
9%
Construction Company
7%
Manufacturing Company
13%
Computer Software Company
11%
Financial Services Firm
9%
Comms Service Provider
8%
Computer Software Company
10%
Manufacturing Company
10%
Comms Service Provider
9%
Construction Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise7
Large Enterprise8
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise7
Large Enterprise11
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise11
 

Questions from the Community

What needs improvement with iboss?
iboss can increase security in cyberspace. I have heard they are doing DDoS filtering, but I am not certain if they a...
What is your primary use case for iboss?
I use iboss for corporate VPN and all the corporate VRF, with basically all user traffic proxying to the internet.
What is your experience regarding pricing and costs for iboss?
Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...
What is your primary use case for Cato Networks?
I can see that I am a consultant at a reseller and I am the architect of Cato SASE Cloud Platform designs. In the bas...
What advice do you have for others considering Cato Networks?
It is difficult to find types of companies I would not recommend Cato SASE Cloud Platform to, and I believe you can u...
What is your experience regarding pricing and costs for Cato Networks?
I do not find it particularly expensive, but for some companies, they may not have the budget to be at that level of ...
What is your experience regarding pricing and costs for Rapid7 Metasploit?
The pricing of Rapid7 Metasploit is quite affordable. It has a free version that many customers start with, and after...
What needs improvement with Rapid7 Metasploit?
The automated approach in the audits or in the hacking testing with Rapid7 Metasploit could be improved because even ...
What is your primary use case for Rapid7 Metasploit?
I use Rapid7 Metasploit as a distributor, as an integrator, and as a user. I use Rapid7 Metasploit in my company inte...
 

Also Known As

iBoss Cloud Platform
Cato Networks
Metasploit
 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
Paysafe, AdRoll, Pet Lovers Centre, Arlington Orthopedics, Humphreys & Partners Architects
City of Corpus Christi, Diebold, Lumenate, Nebraska Public Power District, Prairie North Regional Health, Apptio, Automation Direct, Bob's Stores, Cardinal Innovations Healthcare Solutions, Carnegie Mellon University
Find out what your peers are saying about Palo Alto Networks, Zscaler, Cato Networks and others in Secure Access Service Edge (SASE). Updated: March 2026.
890,088 professionals have used our research since 2012.