Try our new research platform with insights from 80,000+ expert users

Cato SASE Cloud Platform vs Rapid7 Metasploit comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

iboss
Sponsored
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
19
Ranking in other categories
Secure Web Gateways (SWG) (5th), Internet Security (3rd), Web Content Filtering (1st), Cloud Access Security Brokers (CASB) (7th), ZTNA as a Service (7th), Secure Access Service Edge (SASE) (8th)
Cato SASE Cloud Platform
Average Rating
9.0
Reviews Sentiment
7.5
Number of Reviews
31
Ranking in other categories
WAN Optimization (2nd), Intrusion Detection and Prevention Software (IDPS) (11th), Cloud Access Security Brokers (CASB) (6th), Software Defined WAN (SD-WAN) Solutions (6th), WAN Edge (6th), ZTNA as a Service (6th), Secure Access Service Edge (SASE) (2nd), Remote Browser Isolation (RBI) (2nd)
Rapid7 Metasploit
Average Rating
8.0
Reviews Sentiment
6.1
Number of Reviews
22
Ranking in other categories
Vulnerability Management (19th)
 

Mindshare comparison

Secure Access Service Edge (SASE) Mindshare Distribution
ProductMindshare (%)
Cato SASE Cloud Platform9.8%
Prisma Access by Palo Alto Networks11.8%
Zscaler Zero Trust Exchange Platform9.5%
Other68.9%
Secure Access Service Edge (SASE)
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Rapid7 Metasploit1.7%
Wiz6.4%
Tenable Nessus5.0%
Other86.9%
Vulnerability Management
 

Featured Reviews

reviewer2701851 - PeerSpot reviewer
Managing Director
Enhances web security with a single pane of glass and flexible deployment
I don't see any need for improvement; one of the really good things about iboss as a company is that they listen to customer feedback. I have suggested enhancements, and they are responsive, making changes for the better, and they do a lot of testing. To improve iboss, although we haven't used it, we considered the VPN solution that comes with the highest tier licensing, which includes DLP and various other add-ons. We prefer using another product which automatically logs you back onto your network when turning on your PC. With iboss, the connection is manual, which doesn't meet our needs. Additionally, sizing can be tricky because, although the initial recommendations may seem adequate, actual usage may require more gateways than anticipated.
reviewer2697738 - PeerSpot reviewer
Product & Services Integrator at a comms service provider with 10,001+ employees
Cloud security has unified global network design and has simplified threat visibility
I think all of the functionalities, such as the secure web gateway feature, are quite good. I also believe Cato SASE Cloud Platform is one of the only solutions that has not only a software firewall solution but also a physical software solution where you can change the company's firewalls and put in sockets from Cato SASE Cloud Platform, which I see as an advantage for them. The single-pass architecture has improved user experience with Cato SASE Cloud Platform as it provides security teams in companies a platform where they can easily obtain information if there are breaches or security issues. I assess the benefit of integrating WAN optimization as good. There is ease in making rules between WAN optimization, especially when it comes to global connections because of all their points of presence that are spread over the world. I think the real-time threat protection of Cato SASE Cloud Platform is also good. Their points of presence are quite efficient, and I do not see any delays in that area.
reviewer1247523 - PeerSpot reviewer
Head of Sales Services Department at a comms service provider with 51-200 employees
Extensive exploit database and seamless integration enhance penetration testing capabilities
The automated approach in the audits or in the hacking testing with Rapid7 Metasploit could be improved because even the same attack you provide today will go in different ways another day. I prefer when the auditor or pen-tester provides the attack in a non-automated mode. For some, it might be a valuable option, but I'm not sure it's valuable for us, as after the attack has been provided, we should release a report detailing how it transpired and what the customer should improve to block this way of attack. If the attack was provided in an automated mode, you cannot receive sufficient information that helps with this final report for the customer. While you can check the vulnerability, and the system will tell you there is no vulnerability, usually, a human can change one, two, or three parameters and using the same technique and the same scripts can break the system. Rapid7 Metasploit could be improved in areas concerning the experience with finding particular scripts pre-installed in the solution. Customers, administrators, and pen-testers spend considerable time trying to locate the specific component they need by the name of the technique or the name of the attack, so any improvements in making it easier to find those predefined components by name or timeframe would be beneficial. Search filters could be a correct improvement.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Iboss is a solution that prevents advanced persistent threats, and has a zero tolerance for attacks."
"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."
"Technical support is pretty sharp and very responsive."
"I would definitely recommend iboss for web filtering purposes to other organizations or individuals."
"It was a very easy product to install. It can be deployed very fast."
"Content filtering is the most useful feature of iboss."
"Our primary use case for this product is DLP,"
"The iboss system is highly reliable. The false positive rates are small compared to some other systems we've experienced through other partner agencies who use competing solutions."
"The product is efficient and easy to use."
"I haven't had any trouble, and practically forget that I'm using it."
"It is difficult to find types of companies I would not recommend Cato SASE Cloud Platform to, and I believe you can use Cato SASE Cloud Platform in most environments, although there could be some cases where organizations are really cost-sensitive."
"The tool's advantage is that it provides a hassle-free solution that is easy to manage across all customers. For instance, we have a few customers with as few as 50 users, including one with a branch in Vietnam and others with thousands of users."
"What I found most helpful in Cato Networks is that it works out of the box. One of its main advantages is that it's a simple product to deploy. You subscribe, and you're ready to run."
"It is a stable solution...it is a scalable solution."
"I would definitely recommend Cato Networks to other users."
"I rate Cato SASE Cloud Platform at 9.5 out of 10."
"The solution is open source and has many small targetted penetration tests that have been written by many people that are useful. You can choose different subjects for the test, such as Oracle databases or Apache servers."
"The reporting on the solution is good."
"The most valuable features of Metasploit include its powerful capabilities for exploitation and scanning."
"The most valuable features and capabilities of Rapid7 Metasploit are its tight connection with InsightVM, which searches for potential threats and vulnerabilities and then validates whether we can break the system using those vulnerabilities, serving as a validator component of the InsightVM solution."
"It's not possible to do penetration testing without being very proficient in Metasploit."
"Stability-wise, I rate the solution a nine out of ten...Scalability-wise, I rate the solution a nine out of ten."
"The option to generate phishing emails has proven to be very valuable in understanding the behavior of users."
"The most valuable feature for us is the support for testing Linux-based web server components."
 

Cons

"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."
"Our iboss subscription access should be more secure with an OTP or VPN etc. It is easy to gain access if, for example, hackers obtain my username and password."
"The reporting feature needs improvement."
"To scale up, a new iboss Node Blade Chassis must be purchased."
"The reporting feature needs improvement. It doesn't give you the expected results. It is quite difficult to get the specific reports needed, and it is not as intuitive as the rest of the platform."
"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."
"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."
"Iboss is growing so fast that it is often hard for them to keep up with the challenges."
"The tool should improve its interface."
"However, Cato's solution is modular. You don't have to buy the whole package; instead, you can start with some of the functionality and then expand it as you see fit, based on its value and as your other contracts expire."
"I would like to see better integration with identity providers."
"The product must evolve into the endpoint domain."
"A little tweaking or improvement of the UI in terms of logging when troubleshooting would be an improvement because it's very detailed."
"The product may be complex for users with few years of experience."
"For a packaged solution, needing external intervention or a system integrator to get other features not offered by Cato Networks could be an area for improvement. Cato Networks does what it's meant to do and is even overstretching capabilities when introducing new features. The product can only have very few features added on top of what its currently doing. Managed service providers can deliver the extra features you'd need. It's a set of managed services, and what Cato Networks does is very comprehensive. So, for the time being, when the actual incarnation of the SASE solution is deployed, Cato Networks is a very effective product. Naturally, technology will evolve, so everybody knows that in three, four, or five years, there will be a new kid on the block, a new game. Still, at the moment, Cato Networks only needs to improve a little regarding SASE delivery. The product is doing very well, but one feature the Cato Networks team is doing right is preparing for the future through deploying the SSE 360, so the security service is at that edge. It's an excellent strategy to prepare for the future. SSE 360 is what Cato Networks should invest in the most to keep prospering."
"Modifying or incorporating Cato Network to work with a third-party platform, such as Microsoft, or other Software-as-a-Service (SaaS) offerings would be beneficial. Having more integration partners would help the users implement the solution."
"While Metasploit excels in vulnerability assessment, it could improve in vulnerability management."
"I would like to see more capabilities, more functions, and more features. More types of attack vectors."
"Better automation capabilities would be an improvement."
"I think areas with shortcomings that need improvement are more integration and automation."
"There are numerous outdated exploits in their database that should be updated."
"Rapid7 Metasploit could be made easier for new users to learn."
"Advanced Infrastructure should be implemented in the next release for better orchestration."
"The solution should improve the responsiveness of its live technical support."
 

Pricing and Cost Advice

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."
"We have not priced the solution recently, but they were competitive with other vendors in the past."
"The overall pricing for iboss is very competitive and transparent."
"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."
"It is expensive compared to one of its competitors."
"It is probably in line with other solutions, but I do not deal with the financial side."
"The product is very competitively priced, and that's compelling. They don't charge the customer based on the operational cost like other brands such as Palo Alto. Cato has its own fully-fledged cloud, with their own data centers, equipment, and so on, which is an advantage. I rate the solution five out of five for affordability."
"Cato Networks seems more expensive than Cisco Meraki."
"The platform is expensive."
"The price of Cato Networks is in the middle range compared to other solutions. NetFoundry is a less expensive solution than Cato Networks."
"The solution is reasonably priced since Cato Networks provides features like SASE and monitoring, which I am very happy with currently."
"If you compare with VeloCloud, the price is the same or even cheaper."
"The pricing of the solution depends upon the bandwidth required for different branches"
"The solution has reasonable pricing. It has a yearly subscription. The pricing depends on the permit to code. Sometimes, we need to increase the permit, and the cost will automatically change. There's no fixed cost. Unless we request additional modules such as DNS security, ELP, and decent features, there will be no additional cost."
"The cost is approximately $15 per device."
"I have used the free version of Rapid7 Metasploit."
"There are two versions available, one of which is the Pro version, and the other is the free version."
"I use the open-source version of this product. Pricing is not relevant."
"We pay monthly. The pricing is reasonable."
"The pricing structure involves a one-time purchase cost of approximately twenty thousand dollars or euros for all customers."
"The great advantage with Rapid7 Metasploit, of course, is that it's free."
"Rapid7 Metasploit is cheaper than Tenable.io Vulnerability Management."
report
Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
10%
Manufacturing Company
9%
Comms Service Provider
6%
Manufacturing Company
14%
Computer Software Company
12%
Financial Services Firm
9%
Comms Service Provider
7%
Computer Software Company
11%
Manufacturing Company
10%
Comms Service Provider
9%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise6
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise7
Large Enterprise11
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise11
 

Questions from the Community

What needs improvement with iboss?
For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...
What is your primary use case for iboss?
Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...
What is your experience regarding pricing and costs for iboss?
Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...
What is your primary use case for Cato Networks?
I can see that I am a consultant at a reseller and I am the architect of Cato SASE Cloud Platform designs. In the bas...
What advice do you have for others considering Cato Networks?
It is difficult to find types of companies I would not recommend Cato SASE Cloud Platform to, and I believe you can u...
What is your experience regarding pricing and costs for Cato Networks?
I do not find it particularly expensive, but for some companies, they may not have the budget to be at that level of ...
What do you like most about Rapid7 Metasploit?
I use Rapid7 Metasploit for payload generation and Post-Exploitation.
What is your experience regarding pricing and costs for Rapid7 Metasploit?
The pricing of Rapid7 Metasploit is quite affordable. It has a free version that many customers start with, and after...
What needs improvement with Rapid7 Metasploit?
The automated approach in the audits or in the hacking testing with Rapid7 Metasploit could be improved because even ...
 

Also Known As

iBoss Cloud Platform
Cato Networks
Metasploit
 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
Paysafe, AdRoll, Pet Lovers Centre, Arlington Orthopedics, Humphreys & Partners Architects
City of Corpus Christi, Diebold, Lumenate, Nebraska Public Power District, Prairie North Regional Health, Apptio, Automation Direct, Bob's Stores, Cardinal Innovations Healthcare Solutions, Carnegie Mellon University
Find out what your peers are saying about Palo Alto Networks, Cato Networks, Netskope and others in Secure Access Service Edge (SASE). Updated: February 2026.
884,873 professionals have used our research since 2012.