Try our new research platform with insights from 80,000+ expert users

Rapid7 InsightVM vs Varonis Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Vulnerability Management (18th), Continuous Threat Exposure Management (CTEM) (3rd)
Rapid7 InsightVM
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
65
Ranking in other categories
Risk-Based Vulnerability Management (4th)
Varonis Platform
Average Rating
8.4
Reviews Sentiment
6.4
Number of Reviews
17
Ranking in other categories
Email Security (15th), Data Loss Prevention (DLP) (4th), User Entity Behavior Analytics (UEBA) (3rd), Data Governance (4th), SaaS Security Posture Management (SSPM) (1st), Data Security Posture Management (DSPM) (3rd), Compliance Management (7th), Ransomware Protection (7th), Identity Threat Detection and Response (ITDR) (6th), Insider Risk Management (1st), AI Security (3rd)
 

Mindshare comparison

Risk-Based Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Rapid7 InsightVM11.0%
Qualys VMDR12.7%
Tenable Security Center9.0%
Other67.3%
Risk-Based Vulnerability Management
Data Loss Prevention (DLP) Market Share Distribution
ProductMarket Share (%)
Varonis Platform6.5%
Microsoft Purview Data Loss Prevention8.9%
Forcepoint Data Loss Prevention6.2%
Other78.4%
Data Loss Prevention (DLP)
 

Featured Reviews

Reviewer6233 - PeerSpot reviewer
Works at a healthcare company with 10,001+ employees
Has become an indispensable tool in our cybersecurity arsenal
While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even greater value. One key area for enhancement is the searching capabilities within its vulnerabilities module. By incorporating the ability to create Boolean searches, users would gain the ability to apply more complex filters and customize their search criteria. This would greatly enhance the precision and efficiency with which security teams can identify and prioritize vulnerabilities. Having such tailored search capabilities would save time and resources by narrowing down vast lists of vulnerabilities to those that meet specific parameters relevant to our unique risk environment. Additionally, integrating more robust reporting and visualization tools would be advantageous. Enhanced dashboards that offer customizable visual representations of risk configurations and threat landscapes would facilitate better communication with stakeholders, making it easier to explain vulnerabilities and the rationale behind certain security measures. This would also aid in demonstrating the improvements and value derived from existing security investments to leadership and non-technical team members.
FL
Senior Manager - Pre-Sales at Trillium Information Security Systems
Offers robust compliance features but needs improved automation in remediation
The automation capability remediation needs improvement. The current process requires manually telling IT teams to remediate vulnerabilities, and then they update the status of these vulnerabilities in the platform. This basic feature that Rapid7 calls an automated remediation process is actually manual. We can update the status of vulnerabilities in the Rapid7 InsightVM platform and collectively see how many vulnerabilities we have identified and how many are remediated by our IT team. More automation in the remediation feature is a basic demand from many customers. The remediation part and vulnerability identification of network devices or rigid devices are not currently supported by Rapid7 InsightVM. More integration and automation are the two areas Rapid7 needs to improve in their product.
SureshKumar - PeerSpot reviewer
Technical Consultant at Satcom Infotech Pvt Ltd
Has improved data visibility and protection while enabling automated compliance monitoring
Varonis Platform offers multiple features for data protection, such as data discovery and classification. We can identify, discover, and classify sensitive data effectively, which is crucial given the DPDP law in India and GDPR. The platform also excels in access and exposure tracking, enabling us to monitor users, permissions, and reduce access to sensitive files. Additionally, it includes UEBA for behavior analytics and threat detection, making it valuable for compliance and audit readiness. Varonis Platform has helped our organization primarily for DPDP compliance, although I currently don't have a specific example related to GDPR or HIPAA. A unique feature of Varonis Platform that stands out to me is that, in the current market, it is one of the best data classification solutions available. Compared to others such as Forcepoint, Varonis Platform is agent-based and AI-driven for detection and response, identifying data based on its content and context, and it includes automated remediation and lifecycle automation, making it a leading product in the market.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Zafran has become an indispensable tool in our cybersecurity arsenal."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"With Zafran Security, it integrates with your security controls, allowing you to take that risk score and reduce it based on the controls in place or increase the risk based on different factors, such as if the issue is internet reachable or if there's an exploit in the wild."
"We saw benefits from Zafran Security almost immediately after deploying it."
"Zafran is an excellent tool."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"It is a stable solution."
"NeXpose is a pretty good vulnerability scanner... There's a nice dashboard."
"InsightVM has a very organized GUI with ease of use."
"Rapid7 InsightVM is an on-premise type product that has helped us manage potential vulnerabilities effectively."
"It is stable and scalable."
"It's easy to use. It's fast, it's a powerful easy to access tool."
"The assessment is most valuable."
"I liked the dashboard on it. I could customize my dashboard with different widgets and different heat maps."
"In my experience, the best features that Varonis Platform offers are data labeling, data classification, along with all the integrations and its easy-to-use platform."
"Varonis Platform is transparent and captures everything in the environment without impacting the performance. The tool helps us unify data feeds into a single reporting system."
"It can easily identify unusual behavior or access patterns that may pose a potential threat, while operating as a unified reporting system."
"The 24/7 support is the most valuable feature. They have been able to answer support questions pretty quickly."
"The solution's classification engine is highly configurable and efficient."
"I also appreciate the reporting feature, which allows for the extraction of various reports based on specific needs. These reports can be used for audit purposes, such as tracking changes in file locations or deletions."
"The solution has significantly improved data security and compliance posture by allowing us to track and monitor activities. We can see who accesses data and when files are created and understand what's happening in our environment."
"The solution ensures that users have not accidentally shared sensitive information with the wrong people or too many people."
 

Cons

"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"InsightVM could be improved by providing passive scanning as an option."
"Rapid7 InsightVM, has impressive capabilities, especially when it comes to managing video equipment. However, we've noticed that Rapid7 also offers a cloud solution called CloudSec, and we don't have that. We think it would be better if InsightVM had all the features for both on-premise and cloud management."
"In order to be able to properly test the solution and make a decision, I would like to receive the test license code instantly and eliminate the wait time."
"Within InsightVM, there is no feature to assign a ticket. If we can have more API calls, we can do that from InsightVM."
"The reporting is very bad when you compare it with other vulnerability assessment tools."
"We are a registered reseller and a trusted partner. However, for us to get any support from them I can't log a call directly with Rapid7 InsightVM. I have to work with the distributor to log the call for me."
"The on-premise updates could improve from Rapid7 InsightVM."
"It would be nice to have an additional feature that would provide reports on who has logged onto the console or who did what on the console."
"I'd like to see automatic updates for this solution. Currently, it's a manual process to update all the keywords"
"It would be beneficial if the reporting in Varonis Platform could use PDFs instead of Excel for better graphs, as the dashboards are really good, and it would be nice to have simplified dashboards in PDF for business reporting purposes."
"There is one thing that if I add something manually, I get so many alerts. That's the biggest bad thing."
"One area for improvement is the calculation engine. When applying rules in Varonis, especially for large datasets (terabytes of data), the calculations can be slow and require time to process. Speeding up this process would be beneficial."
"The remediation process can be improved. There will be no existing permission group for the McAfee channel domains. We can create a new permissions group for the required folder."
"The solution's areas of improvement are the interface and the dependency on on-premises deployment for some components."
"While Varonis Platform is powerful, the initial data scanning and indexing can take significant time in large environments."
"The solution's interface is a little complicated with regard to setting up filters and reports."
 

Pricing and Cost Advice

Information not available
"Licensing fees are paid on a yearly basis."
"Our licensing costs are somewhere around $40,000 annually. There are no additional fees."
"I do not have experience with the pricing of the solution."
"Its pricing depends on the number of users per month."
"Its licensing is yearly. Everything is included in the price for one year."
"The product is cheaper than the other similar tools available in the market."
"The solution's pricing is better than Nexus which charges a high amount for very little use."
"The license is annual and this is the optimal approach when it comes to most software."
"I would rate the pricing an eight out of ten, with ten being the most expensive."
"You could do a subscription, where you pay yearly, or you could purchase it outright. The licensing cost is based on the number of users on the system that you are monitoring."
"Varonis Platform wasn't certainly the cheapest solution."
"It's expensive, kind of, really expensive."
"Licensing is on an annual basis. Maintenance and renewal fees are separate. Varonis Datalert is quite expensive."
"The platform is expensive. I rate the pricing a nine out of ten."
"The pricing is good. It neither expensive nor cheap. It is average."
report
Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.
879,899 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
8%
Computer Software Company
8%
Outsourcing Company
6%
Financial Services Firm
12%
Manufacturing Company
11%
Computer Software Company
10%
Government
6%
Financial Services Firm
15%
Manufacturing Company
10%
Computer Software Company
8%
Insurance Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise13
Large Enterprise24
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise12
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. Yo...
What do you like most about Rapid7 InsightVM?
The product's initial setup phase was very easy.
What is your experience regarding pricing and costs for Rapid7 InsightVM?
The customers are mostly SMBs, though some enterprise organizations have also deployed the solution. This is neither ...
What do you like most about Varonis Platform?
The solution has significantly improved data security and compliance posture by allowing us to track and monitor acti...
What needs improvement with Varonis Platform?
While Varonis Platform is powerful, the initial data scanning and indexing can take significant time in large environ...
What is your primary use case for Varonis Platform?
My main use case for Varonis Platform is for data classification on the user's machine, specifically for data visibil...
 

Also Known As

No data available
InsightVM, NeXpose
SlashNext Complete
 

Overview

 

Sample Customers

Information Not Available
ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
Nottingham Building Society
Find out what your peers are saying about Qualys, Tenable, Rapid7 and others in Risk-Based Vulnerability Management. Updated: January 2026.
879,899 professionals have used our research since 2012.