There are so many cases for InsightVM. It's used for customers that need the ICS compiler or if they need users to work from home right now. It allows them to manage assets from anywhere.
Network & Security Engineer at PT. Centrin Online Prima
Reliable, easy to set up, and has good active scan capabilities
Pros and Cons
- "It's very scalable."
- "We'd like the agent to cover more compliance issues."
What is our primary use case?
What is most valuable?
Using active scan is good.
If you have a history with the solution, the initial setup is easy.
The solution is stable and reliable.
It's very scalable.
What needs improvement?
The agent must be covered if the customer wants to do a combined thing. InsightVM cannot do that if they are using an agent. We'd like the agent to cover more compliance issues.
For how long have I used the solution?
I've been using the solution for three or four years.
Buyer's Guide
Rapid7 InsightVM
January 2025
Learn what your peers think about Rapid7 InsightVM. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
831,265 professionals have used our research since 2012.
What do I think about the stability of the solution?
The product is stable. There aren't bugs or glitches. It doesn't crash or freeze. It's reliable and the performance is good.
What do I think about the scalability of the solution?
If you want to scan more than 1,000 assets, then we need to show the requirement first. It will use the server with maximum CPU, and maximum RAM. The scalability is quite higher than on the previous one we used. It keeps getting better.
How was the initial setup?
Typically, the initial setup is easy. If a user has the experience, it is straightforward. However, if we work together with an organization that has never used it before, there's more configuration that needs to be done.
What other advice do I have?
We're working with the latest version of the solution, however, I cannot recall the exact version number.
While our clients are using a hybrid cloud, the customers still need to install on-premise. Your console right now is like a dashboard; it's moved to the cloud.
I'd advise users to try the solution. If they are using InsightVM they will be able to quickly understand what the vulnerabilities are on their assets.
I'd rate the solution eight out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Google
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Information security engineer at Cyberisk
Comprehensive vulnerability management with robust set of features, making it highly effective for enhancing security posture and mitigating risks
Pros and Cons
- "The most valuable features are its reporting capabilities and the host discovery functionality."
- "There is a significant learning curve, that non-technical individuals, especially those not specialized in computer science or the information security industry, might face."
What is our primary use case?
It's a vulnerability scanning tool utilized within the vulnerability management process. We employ it to conduct internal vulnerability assessments of company or organizational host IPs.
How has it helped my organization?
It aids in enhancing the overall security posture within our organization. It uncovered numerous vulnerabilities that had been overlooked, which was quite beneficial.
What is most valuable?
The most valuable features are its reporting capabilities and the host discovery functionality.
What needs improvement?
The primary issue I encountered initially with this tool was related to configuration. There is a significant learning curve, that non-technical individuals, especially those not specialized in computer science or the information security industry, might face.
For how long have I used the solution?
I have been working with it for six months.
What do I think about the stability of the solution?
I am satisfied with the stability provided.
How was the initial setup?
The initial setup went smoothly, but after completing it, I encountered difficulties when attempting to use features like the dashboard and the scan now option. Specifically, I faced challenges with scanning the host, which proved to be quite frustrating.
What about the implementation team?
The initial setup wasn't overly difficult, so it took me around one to two days due to troubleshooting issues. Overall deployment took about two to three days in total.
What other advice do I have?
I highly recommend Rapid7 as my experience with it is very positive. Overall, I would rate it eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Buyer's Guide
Rapid7 InsightVM
January 2025
Learn what your peers think about Rapid7 InsightVM. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
831,265 professionals have used our research since 2012.
Information Technology Security Specialist at Digitaltrack
Easy to use with good dashboards and decent reporting
Pros and Cons
- "We can create our own templates."
- "The authentication scan is not working."
What is our primary use case?
We primarily use the solution for scanning. It will support the agent and collect scanning information on particular hotspots.
What is most valuable?
We like that you can create your own inputs using the chat.
The integration capabilities are good.
It has good reporting.
We can create our own templates.
The dashboard is very easy to use for customers.
What needs improvement?
The firewall could be better.
We've had struggles with new scanning on Cisco routers. We have to do a lot of troubleshooting. The authentication scan is not working.
We'd like better risk levels for assets in terms of reporting.
For how long have I used the solution?
I've been using the solution since 2019. I've only used it for a few years at this point.
What do I think about the stability of the solution?
The solution is quite stable. It's reliable. There are no bugs or glitches. It doesn't crash or freeze. I'd rate the stability eight out of ten.
What do I think about the scalability of the solution?
The solution is scalable. It offers pretty high scalability. I'd rate it nine out of ten.
Our clients are medium to large-scale businesses.
How was the initial setup?
The initial setup is very easy. It is very customizable and easy to understand.
I'm not sure how long the deployment took. The POC took about 30 days to allow the clients to try it out. We requested a POC to test out some use cases.
What other advice do I have?
I'm a reseller.
I'm not sure which version of the solution I'm using. It might be version six or seven.
I'd recommend the solution to others.
I would rate the solution eight out of ten.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
Material Coordinator at a energy/utilities company with 1,001-5,000 employees
Useful reports, stable, and good vendor support
Pros and Cons
- "The reports in Rapid7 InsightVM are useful when compared to competitors."
- "Rapid7 InsightVM could be easier to use for those who are using it for the first time."
What is our primary use case?
We are using Rapid7 InsightVM to have a vulnerability assessment solution in our organization to overcome the audit points.
How has it helped my organization?
We are at the stage where we are deciding if the solution will be useful for us or not.
We generate the reports for our IT sessions and try to take the recommended actions. After the action is made, we generate another report to check if this action covers the vulnerability points or not.
What is most valuable?
The reports in Rapid7 InsightVM are useful when compared to competitors.
What needs improvement?
Rapid7 InsightVM could be easier to use for those who are using it for the first time.
The updates should be fixed in the next release.
For how long have I used the solution?
I have been using Rapid7 InsightVM for a few months.
What do I think about the stability of the solution?
The stability of Rapid7 InsightVM has been fine in the three months we have used it.
What do I think about the scalability of the solution?
We are using a virtual environment with Rapid7 InsightVM and we can expand it if we want.
We have approximately three people using this solution in my company. We use the solution weekly or monthly. We would increase the use of the solution if our tests go well.
How are customer service and support?
The support that we are receiving at this time is from our partner who handles the issue with the vendor if needed.
How was the initial setup?
The initial setup was not straightforward because it was our first time doing it.
We did a POC first and this took us two months to make the environment. After we received the license we went into production.
What about the implementation team?
We had a partner help us with the implementation of Rapid7 InsightVM.
We have an IT department that does the maintenance and support of Rapid7 InsightVM.
What's my experience with pricing, setup cost, and licensing?
We have an annual license to use Rapid7 InsightVM and if we want to extend it, we will possibly choose more than one year.
What other advice do I have?
I recommend this solution to others and for them to use a partner for the implementation. It can be difficult for the first time.
I rate Rapid7 InsightVM an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Director of Information Technology at a government with 201-500 employees
Good at identifying vulnerabilities but had issues with scans and endpoint accuracy
Pros and Cons
- "The main functionality of identifying item endpoints that weren't properly patched or had vulnerabilities is the solution's most valuable feature."
- "We found that after you passed an endpoint, it didn't always reflect it in the next scan. I'm not sure if it was a glitch or some issue with the product's software. That was never clear. That was always an issue and something that definitely needed improvement."
What is our primary use case?
The solution is primarily used for vulnerability management, specifically vulnerability scanning of the endpoint devices.
What is most valuable?
The main functionality of identifying item endpoints that weren't properly patched or had vulnerabilities is the solution's most valuable feature.
What needs improvement?
We found that after you passed an endpoint, it didn't always reflect it in the next scan. I'm not sure if it was a glitch or some issue with the product's software. That was never clear. That was always an issue and something that definitely needed improvement.
For how long have I used the solution?
We've used the solution for four years.
What do I think about the stability of the solution?
I didn't notice anything in terms of stability issues. There was always data in it, so I didn't, face any problems. We just had an issue once where we would scan and then we would patch and occasionally it wasn't reflected on the next scan that that patch was there. That was the biggest issue we faced. Other than that, it was reliable. We didn't really have glitchiness or bugs. It wasn't crashing or freezing on us.
What do I think about the scalability of the solution?
I probably don't have an opinion on the scalability. It seemed to function, however, beyond that I'm not sure. As an end-user, I just would log in and run reports. I wasn't in charge of expanding the solution. I used it in a pretty non-technical way.
There were only ever about 10 to 15 users on the solution at any given time.
How are customer service and technical support?
I never actually got in touch with technical support. I wouldn't be able to speak t their level of service.
Which solution did I use previously and why did I switch?
The company did not use a different solution before using this product.
How was the initial setup?
I never set up the software myself. I was always just an end-user. I can't speak to if the solution was straightforward or complex.
I have not idea how long deployment took. I'm not sure if it was a long process or not.
Maintenance was handled by our security division. I don't know if there was one person or there were multiple admins that handled that aspect of the solution.
What about the implementation team?
It's my understanding that the solution was set up in-house and an integrator or reseller was not used.
What's my experience with pricing, setup cost, and licensing?
I'm not sure what the solution would cost on a monthly or yearly basis.
Which other solutions did I evaluate?
I'm not sure if the company evaluated other options or not. I wasn't part of that process.
The company I'm working with now is looking at evaluating Tenable.io.
What other advice do I have?
The company I worked for was just a customer and I was just an end-user. There was no business relationship between the two companies that I was aware of.
The company is considering moving from on-premises to the cloud.
I am unsure of which version of the solution is being used currently. I'm no longer at the company where I used the product.
While the solution worked well, I have never compared other solutions, so I don't know if it's best in class or not.
I'd rate the solution six out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Security Specialist at a financial services firm with 1,001-5,000 employees
Simple to install, user interface is both professional and user-friendly
Pros and Cons
- "This solution's most useful feature is that it is entirely a single-page application."
- "The drawback is that it is still not a fully SaaS solution, so you must deploy a console."
What is our primary use case?
We use Rapid7 InsightVM to increase vulnerability scanning, which is why we tried Qualys as well.
What is most valuable?
This solution's most useful feature is that it is entirely a single-page application.
The UI is both professional and user-friendly.
What needs improvement?
The drawback is that it is still not a fully SaaS solution, so you have to deploy a console.
For how long have I used the solution?
I have been working with Rapid7 InsightVM for six weeks.
What do I think about the stability of the solution?
Rapid7 InsightVM is stable.
What do I think about the scalability of the solution?
Rapid7 InsightVM is a scalable solution.
How are customer service and support?
We have two dedicated technicians to assist us.
Which solution did I use previously and why did I switch?
We are also testing Qualys. If you look at both options, I believe they are the same. Both are in the top market leader position.
Both tools have the same features. The most essential consideration in choosing one of those two experiences with it and whether it fits inside your business.
I can't decide, we are still in the comparison phases.
How was the initial setup?
It is very easy to set up.
It can be deployed in a matter of weeks.
What's my experience with pricing, setup cost, and licensing?
It is pretty expensive. It depends on what you consider pricey, however, if you only look at vulnerability management solutions, such as within VM or VMDR, there are, I suppose the prices are almost the same. But I believe you will discover that for yourself.
What other advice do I have?
Experiment with it and gain some experience with it.
I would rate Rapid7 InsightVM an eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Head of Cyber security analysis at DNV Poland Sp. z o.o.
Company-saving vulnerability scanner that's easy to set up
Pros and Cons
- "InsightVM's best features are the vulnerability database and remediation steps."
- "InsightVM is getting a little stale and is in danger of falling behind its competitors."
What is our primary use case?
I use InsightVM for vulnerability scanning, to follow up that patching is done properly, and to control operational teams and ensure they're doing their job.
How has it helped my organization?
InsightVM lets me scan our environments and ensure that our operational teams are on top of patching.
What is most valuable?
InsightVM's best features are the vulnerability database and remediation steps.
What needs improvement?
InsightVM is getting a little stale and is in danger of falling behind its competitors. It's also becoming more complicated, and I prefer it to be kept simple. Its cloud coverage could also be stepped up.
For how long have I used the solution?
I've been using InsightVM for ten years.
What do I think about the stability of the solution?
Insight VM is very stable.
What do I think about the scalability of the solution?
There used to be some problems with scaling InsightVM, but those limitations have been removed in newer versions.
How are customer service and support?
Rapid7's technical support is brilliant, responsive, and professional.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup was very easy and took a day to complete. I would rate the setup process five out of five.
What about the implementation team?
We used an in-house team.
What was our ROI?
Having a vulnerability scanner has saved us from cyber attacks a number of times, so we've gotten good ROI from Insight VM. I'd rate our ROI as five out of five.
What's my experience with pricing, setup cost, and licensing?
InsightVM is an expensive product, especially compared to its competitors, at around a million NOK per year. Support is included in the license for no extra cost. I would rate their pricing at one out of five.
What other advice do I have?
InsightVM has integration with Kubernetes, which no other solution has. I would give Insight VM a rating of eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Senior Security Analyst at a financial services firm with 1,001-5,000 employees
We have fewer false positives when using it
Pros and Cons
- "We feel the interface is very good. It is very easy to use, even a nontechnical person can use it."
- "The reporting has room for improvement. You cannot customize any report. If I need a specific requirement, I have to create a new report for it."
What is our primary use case?
We are using the solution for configuration review and vulnerability management.
I am using the latest version.
How has it helped my organization?
We have fewer false positives.
What is most valuable?
We feel the interface is very good. It is very easy to use, even a nontechnical person can use it.
What needs improvement?
The reporting has room for improvement. You cannot customize any report. If I need a specific requirement, I have to create a new report for it. I cannot pull up two or three things in one report.
For how long have I used the solution?
Three years.
What do I think about the stability of the solution?
It is stable. For the last three years, we haven't faced any bugs.
What do I think about the scalability of the solution?
It's very easily scalable. You just have to renew your license, and the scalability is already done.
Currently, we have three people who are use the solution. We manage this solution for the whole organization.
How are customer service and technical support?
The technical support is very helpful, but too slow. Overall, it usually takes 24 hours for them to reply, but the support that they provide is good.
How was the initial setup?
It's very straightforward. The deployment took less than an hour.
What about the implementation team?
We implemented it on our own.
What's my experience with pricing, setup cost, and licensing?
The license is IP based. How many IPs you are using to scan is the amount of the license you have to buy. The number of users doesn't matter; many users can use it or only person. It depends on the culture of the organization.
We have 600 to 700 licenses.
Which other solutions did I evaluate?
We tested two to three solutions where we had a couple of false positives.
Rapid7 InsightVM has very low false positives, so you don't have to go in manually and verify them. This solution is efficient.
What other advice do I have?
I would recommend the product. The product is very good.
I would rate the product between a nine and a nine point five (out of 10).
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Download our free Rapid7 InsightVM Report and get advice and tips from experienced pros
sharing their opinions.
Updated: January 2025
Product Categories
Risk-Based Vulnerability ManagementPopular Comparisons
Qualys VMDR
Tenable Security Center
Tenable Vulnerability Management
Microsoft Defender Vulnerability Management
Nucleus
Arctic Wolf Managed Risk
Cisco Vulnerability Management (formerly Kenna.VM)
SanerNow CyberHygiene Platform
Balbix BreachControl
SecureWorks Taegis VDR
Fortra's Vulnerability Management
Buyer's Guide
Download our free Rapid7 InsightVM Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions: