Try our new research platform with insights from 80,000+ expert users

IBM Guardium Vulnerability Assessment vs Rapid7 InsightVM comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

IBM Guardium Vulnerability ...
Average Rating
6.6
Number of Reviews
3
Ranking in other categories
Vulnerability Management (51st)
Rapid7 InsightVM
Average Rating
8.0
Number of Reviews
59
Ranking in other categories
Risk-Based Vulnerability Management (4th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. IBM Guardium Vulnerability Assessment is designed for Vulnerability Management and holds a mindshare of 0.5%, down 0.7% compared to last year.
Rapid7 InsightVM, on the other hand, focuses on Risk-Based Vulnerability Management, holds 18.8% mindshare, up 13.6% since last year.
Vulnerability Management
Risk-Based Vulnerability Management
 

Featured Reviews

KB
Aug 24, 2022
Worthwhile from the regulatory requirements and analytics perspective, but is expensive and not easy to use
We are a full security base integration and application business. We help with implementation and deployments. I used Guardium to help with a cloud migration to check and do some validation for a client's data landscape and services so that they made sure that they were all secure in overall…
Shakeel Ahmad - PeerSpot reviewer
Dec 8, 2022
Brilliant audit report and scorecard but scans often get blocked by firewalls
Our company uses the Nexpose automation tools for validity, deactivation, assessment, and penetration testing. We can easily see if something has been exposed and manually focus on or follow main vulnerabilities.  We have 28 users and a JV license key for using the solution in our offline systems…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The reporting features are good and there are many built-in reports that can be quickly configured."
"The most valuable feature is that it provides a simple English recommendation on actions that you need to take once a vulnerability is discovered."
"It helped with some of the regulatory requirements. It also helped with some of the security analytics and analysis. It was worthwhile from that perspective."
"It's easy to use. It's fast, it's a powerful easy to access tool."
"The solution is good because it has a lot of options."
"The most valuable feature is the site scanning, where we can provide a complete subnet and what it is we need to scan on those devices."
"The main functionality of identifying item endpoints that weren't properly patched or had vulnerabilities is the solution's most valuable feature."
"I really love the new platform. It is really easy to understand, use, and deploy."
"It is good and fits well with pretty much all of our use case needs."
"I have been in contact with technical support and they are not bad."
"When it comes to the process, installation is very easy and does not take long."
 

Cons

"Building policies is not that easy. There are some things that are turned off by default, for example, displaying values."
"It was not as easy to use. The user-friendliness of it was somewhat lower than what I was expecting. It was also lacking in terms of the ease of the setup. There should be an automatic agent for deployment."
"The interface could be improved by having sub-groups of tests, ultimately making the process of collecting tests faster."
"I’d like to see Rapid7 InsightVM improve by adding a knowledge base similar to what Qualys offers. This would help us easily check and search for vulnerabilities using Rapid7 IDs associated with CVs or CVSS. From a features perspective, everything was fine at the time, and the security features of Rapid7 InsightVM were effective."
"Patch management is the only missing feature I can think of. Rapid7 detects vulnerabilities, but it should also help you manage patches."
"A definite improvement would be to make it easier to run ad-hoc scans without needing to assign the asset to a site or group."
"InsightVM could be improved by providing passive scanning as an option."
"Rapid7 InsightVM could be easier to use for those who are using it for the first time."
"Their customer support should be improved, and the effectiveness of scans also needs to be improved."
"This solution integrates with another module in Metasploit, that doesn't exist in the other solutions. It is subscribed to on our roadmap, but we chose to implement both Nexppose and AppSpider."
"There is a significant learning curve, that non-technical individuals, especially those not specialized in computer science or the information security industry, might face."
 

Pricing and Cost Advice

"One thing not advantageous for it was that it was a little bit more expensive. I would rate it one out of five in terms of pricing."
"We have an annual license to use Rapid7 InsightVM and if we want to extend it, we will possibly choose more than one year."
"It is less expensive compared to other competitors."
"The tool's price is neither too high nor too low. My company needs to pay 65,000 per year. There are no additional costs apart from the licensing fees attached to the solution."
"Its pricing depends on the number of users per month."
"The solution is a bit more reasonably priced than other products."
"I do not have experience with the pricing of the solution."
"InsightVM is an expensive product, especially compared to its competitors, at around a million NOK per year."
"The license is IP based. How many IPs you are using to scan is the amount of the license you have to buy. The number of users doesn't matter; many users can use it or only person. It depends on the culture of the organization."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
814,649 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
33%
Computer Software Company
12%
Insurance Company
10%
Manufacturing Company
7%
Educational Organization
39%
Computer Software Company
10%
Financial Services Firm
7%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Ask a question
Earn 20 points
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. You can easily prioritize vulnerabilities using attacker analytics. Overall, Rapid...
What do you like most about Rapid7 InsightVM?
The product's initial setup phase was very easy.
 

Also Known As

No data available
InsightVM, NeXpose
 

Learn More

 

Overview

 

Sample Customers

Information Not Available
ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
Find out what your peers are saying about Tenable, Qualys, Wiz and others in Vulnerability Management. Updated: October 2024.
814,649 professionals have used our research since 2012.