Try our new research platform with insights from 80,000+ expert users
Rapid7 Metasploit Logo

Rapid7 Metasploit pros and cons

Vendor: Rapid7
4.0 out of 5

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Rapid7 Metasploit is essential for proficient penetration testing and offers comprehensive features for exploitation and scanning.
It provides valuable support for generating phishing emails and testing Linux-based web server components.
The platform includes almost all available exploits and payloads, making it a versatile tool for targeted penetration tests.
Rapid7 Metasploit is scalable and aligns well with user needs, offering automation capabilities with the professional edition.
The technical support for Rapid7 Metasploit is helpful and responsive, further enhancing its utility for penetration testing.

CONS

The initial setup for the open-source version was a bit "tweaky."
Metasploit cannot be installed on a machine with antivirus software.
The reporting feature needs improvement, with time-consuming report fetching.
The database is not always updated with the latest vulnerabilities or zero-day exploits.
Support needs improvement, especially for non-security users.
 

Rapid7 Metasploit Pros review quotes

it_user172239 - PeerSpot reviewer
Senior Manager of System Security at a tech services company with 1,001-5,000 employees
Oct 24, 2018
It's not possible to do penetration testing without being very proficient in Metasploit.
Informate5e5 - PeerSpot reviewer
Information Security and Governance Lead Engineer at a comms service provider with 1,001-5,000 employees
Dec 24, 2018
The option to generate phishing emails has proven to be very valuable in understanding the behavior of users.
reviewer1088721 - PeerSpot reviewer
Principal security consultant at a computer software company with 201-500 employees
Jun 4, 2020
The most valuable feature for us is the support for testing Linux-based web server components.
Learn what your peers think about Rapid7 Metasploit. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
879,711 professionals have used our research since 2012.
reviewer2284569 - PeerSpot reviewer
Manager at a financial services firm with 5,001-10,000 employees
Jun 25, 2020
The reporting on the solution is good.
reviewer1432815 - PeerSpot reviewer
Project Director at a tech services company with 1,001-5,000 employees
Oct 20, 2020
All of the features are great.
it_user1649781 - PeerSpot reviewer
CEO at Virtual Security International
Aug 13, 2021
The solution is open source and has many small targetted penetration tests that have been written by many people that are useful. You can choose different subjects for the test, such as Oracle databases or Apache servers.
Mahmoud Elhamaymy - PeerSpot reviewer
Professional services team lead at a tech services company with 1,001-5,000 employees
Oct 5, 2021
Rapid7 Metasploit is a useful product.
Agustinus DWIJOKO - PeerSpot reviewer
Network & Security Engineer at PT. Centrin Online Prima
May 12, 2022
Technical support has been helpful and responsive.
AdeelAgha - PeerSpot reviewer
Team Lead - Cyber Security & Compliance at Al Tuwairqi Group
Mar 3, 2023
The greatest advantage of Rapid7 Metasploit is that it is the only system that can directly exploit vulnerabilities on the Metasploit platform.
Rostum Tampor - PeerSpot reviewer
Solutions Engineer at Gefura Inc.
Jun 6, 2023
Stability-wise, I rate the solution a nine out of ten...Scalability-wise, I rate the solution a nine out of ten.
 

Rapid7 Metasploit Cons review quotes

it_user172239 - PeerSpot reviewer
Senior Manager of System Security at a tech services company with 1,001-5,000 employees
Oct 24, 2018
The initial setup was a bit "tweaky" for the open-source version.
Informate5e5 - PeerSpot reviewer
Information Security and Governance Lead Engineer at a comms service provider with 1,001-5,000 employees
Dec 24, 2018
Metasploit cannot be installed on a machine with an antivirus.
reviewer1088721 - PeerSpot reviewer
Principal security consultant at a computer software company with 201-500 employees
Jun 4, 2020
Better automation capabilities would be an improvement.
Learn what your peers think about Rapid7 Metasploit. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
879,711 professionals have used our research since 2012.
reviewer2284569 - PeerSpot reviewer
Manager at a financial services firm with 5,001-10,000 employees
Jun 25, 2020
The solution should improve the responsiveness of its live technical support.
reviewer1432815 - PeerSpot reviewer
Project Director at a tech services company with 1,001-5,000 employees
Oct 20, 2020
At the time I was using it, the graphical user interface needed some improvements.
it_user1649781 - PeerSpot reviewer
CEO at Virtual Security International
Aug 13, 2021
The solution is not very scalable, it does not provide any automation to be able to scale it.
Mahmoud Elhamaymy - PeerSpot reviewer
Professional services team lead at a tech services company with 1,001-5,000 employees
Oct 5, 2021
Rapid7 Metasploit can add a GUI feature because it is only available online.
Agustinus DWIJOKO - PeerSpot reviewer
Network & Security Engineer at PT. Centrin Online Prima
May 12, 2022
We'd like them to offer better coverage of malware.
AdeelAgha - PeerSpot reviewer
Team Lead - Cyber Security & Compliance at Al Tuwairqi Group
Mar 3, 2023
The solution is not user-friendly and has room for improvement.
Rostum Tampor - PeerSpot reviewer
Solutions Engineer at Gefura Inc.
Jun 6, 2023
I think areas with shortcomings that need improvement are more integration and automation.