InsightVM (Nexpose) Reviews & Product Details

InsightVM is Rapid7’s vulnerability risk management offering that advances security through cross-department clarity, a deeper understanding of risk, and measurable progress. By informing and aligning technical teams, security teams can remediate vulnerabilities and build Security into the core of the organization. With InsightVM, security teams can: Gain Clarity Into Risk and Across Teams Better understand the risk in your modern environment so you can work in lockstep with technical teams. Extend Security’s Influence Align traditionally siloed teams and drive impact with the shared view and common language of InsightVM. See Shared Progress Take a proactive approach to security with tracking and metrics that create accountability and recognize progress.

Seller

Rapid7

Discussions

InsightVM (Nexpose) Community

Product Description

Continuously identify and assess risk across your cloud, virtual, remote, local, and containerized infrastructure. Leverage unparalleled attacker analytics to prioritize vulns more precisely with a Real Risk score that goes beyond just CVSS. Break down the silos between IT, security, and development to streamline and automate remediation efforts.

Overview by

Lisa Ochoa

Pricing

Pricing provided by InsightVM (Nexpose).

InsightVM

$22

/asset*

View More Pricing Information

Top-Rated Alternatives

Tenable Vulnerability Management

4.5/5

(110)

Tenable Security Center

View All Alternatives

InsightVM (Nexpose) Media

InsightVM (Nexpose) Demo - Understand and Prioritize Risk with Clarity

InsightVM not only provides visibility into the vulnerabilities in your modern IT environment—including local, remote, cloud, containerized, and virtual infrastructure—but also clarity into how those vulnerabilities translate into business risk and which are most likely to be targeted by attackers.

InsightVM (Nexpose) Demo - Remediate with Impact and Influence

InsightVM is not a silver bullet. Instead, it provides the shared view and common language needed to align traditionally siloed teams and drive impact. It also supports a proactive approach to vulnerability management with tracking and metrics that create accountability for remediators, demonstra...

InsightVM (Nexpose) Demo - Unify Endpoint Assessment

The Insight Agent is a universal, lightweight agent that collects data for Rapid7 InsightVM, InsightIDR, and InsightOps. Deploy it once, and get live intel on both network and user risk on your endpoints.

InsightVM (Nexpose) Demo - Maximize the Value of Your Tech Stack

Point solutions are a thing of the past. Rapid7's dedicated integrations team ensures that InsightVM is a foundational source of intelligence for the rest of your security program, helping all your products, like InsightIDR, work better together to collectively improve ROI.

G2 reviews are authentic and verified.

Here's how.

tali k.

Threat Intelligence Analyst

Mid-Market (51-1000 emp.)

11/6/2025

"InsightVM’s Actionable Risk Scoring and Live Dashboards Impress"

5/5

What do you like best about InsightVM (Nexpose)?

I like InsightVM’s clear, actionable risk scoring and live dashboards that keep asset exposure prioritized and up to date. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

Some scans and dashboards can feel heavy at scale, and custom reporting and tagging rules sometimes require extra tuning to get right. Review collected by and hosted on G2.com.

Sagar U.

Technical Project Manager

Enterprise (> 1000 emp.)

6/12/2024

"Nexpose is an excellent tool that helps identify vulnerabilities."

5/5

What do you like best about InsightVM (Nexpose)?

InsightVM offers real-time visibility into the entire network, enabling continuous monitoring and immediate detection of vulnerabilities as they appear.

It integrates seamlessly with various other security tools and systems, such as SIEMs, ticketing systems, and DevOps tools, facilitating a more streamlined security workflow.

The tool supports automated remediation workflows, which can significantly reduce the time and effort required to address vulnerabilities. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

You will get dificulty during initial setp as the setup is complex.

Cost is very high to compair to other tool.

Some users have experienced false positives in the scan results, which can lead to unnecessary remediation efforts and wasted resources. Review collected by and hosted on G2.com.

Himanshu K.

IT Security Operations Engineer

Enterprise (> 1000 emp.)

3/14/2024

"Better than most of the products in the market, but not the best"

3.5/5

What do you like best about InsightVM (Nexpose)?

Vulnerability views

Reporting

Dashboards

Tons of threat intelligence and research data integrated with the product by Rapid7. Stuff like Metasploit DB, AttackerKB and project Heisenberg are some of the best integrations.

Remediation Projects

Risk Scoring - the new Active Risk Scoring is awesome.

Scan Assistant (probably the best service for vuln scanning) Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

The security console is a lot buggy.

Native Jira integration is not really native. Breaks all the time.

Sometimes it takes days to identify some vulnerabilities which is a major drawback especially for critical vulnerabilities (Jetbrains TeamCity CVSS10 vuln is one example, took it 3 days to identify vulnerable assets)

Too much administrative efforts to setup stuff. Review collected by and hosted on G2.com.

What problems is InsightVM (Nexpose) solving and how is that benefiting you?

InsightVM is solving all our vulnerability management problems. It checks all the boxes starting from identification to remediation of a vulnerability. I cannot say it is a fully fledged and completely mature tool but it is far better than the other tools I've used in the past (Tenable, Qualys, MS Defender) Review collected by and hosted on G2.com.

Verified User in Translation and Localization

Enterprise (> 1000 emp.)

2/22/2024

"Master in Vulnerability Management"

4/5

What do you like best about InsightVM (Nexpose)?

I have been using this product for more than 6 years and it's the best product for vulnerability management. They keep track of all zero-days and update their database against all newly listed CVEs within 24 hours. It offers an all-in-one dashboard with multiple widgets Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

Integration with extrenal ticketing tool is limited Review collected by and hosted on G2.com.

What problems is InsightVM (Nexpose) solving and how is that benefiting you?

We use this product for vulnerability management, which keeps us updated with newly listed CVEs. It notifies us whenever there is a zero-day or critical vulnerability release. We use it to reduce the risk score in our environment, ensuring timely patching especially for Microsoft Tuesday patches and critical CVEs. It also helps us keep track of EOS/EOL software. Overall, this product helps us stay safe from cyber attacks and reduce our risks Review collected by and hosted on G2.com.

Pranay M.

Information Security Analyst

Small-Business (50 or fewer emp.)

9/6/2023

""One of the Best tool for Vulnerability Management""

4/5

What do you like best about InsightVM (Nexpose)?

InsightVM is providing Agent based scanning which helps us alot, apart from that Dashboard

is also very cool and helps alot in easily go throught the stats. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

There is nothing to dislike apart from Memory consumption is sometimes getting very high. Review collected by and hosted on G2.com.

Ravi C.

Cloud Engineer

Information Technology and Services

Enterprise (> 1000 emp.)

1/1/2023

"Dynamic Asset Discovery feature in InsightVM platform provides fluidity to our inventory management"

4/5

What do you like best about InsightVM (Nexpose)?

InsightVM efficiently manages our cloud workloads through its robust agent installation. We can overview and scan all our images at various stages in deployment. We can also identify potential risks and prioritize handling vulnerabilities in our infrastructure. Since it is an agent-based platform, we can conveniently focus on our enhancements and let InsightVM take care of the underlying dependencies. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

We need to keep track of our resource consumption & take suitable approaches for optimization. This can be tedious while working on InsightVM, but with adequate exposure, it's possible to make the best out of its functionalities. We can build a resilient infrastructure to meet security compliances in our SDLC with InsightCM. Review collected by and hosted on G2.com.

What problems is InsightVM (Nexpose) solving and how is that benefiting you?

Dynamic Asset discovery is crucial for our organization as we work on implementing and decommissioning virtual machines. We can't manually go into our portal and check with the drifts after each deployment. InsightVM is helpful in giving us fluidity to scan dynamically as per our cron schedules and take resource snapshots for quick reference. Hence when there is a security breach, we simply overview the snapshots to troubleshoot and recover our virtual machines hosted for our customer requirements without much downtime. Review collected by and hosted on G2.com.

Verified User in Manufacturing

Enterprise (> 1000 emp.)

7/26/2023

"Good Vulnerability Management Solution"

3.5/5

What do you like best about InsightVM (Nexpose)?

Easy to manage, good capabilities, agent and network scan works as intended. A good way to remediate vulnerabilities using Remediation projects and set proper Goal and SLAs. A good reporting available to use Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

Managing multiple scan jobs and tagging of assets as not granular for very big enterprise organizations. Some network scans can cause network issues for the endpoints. Review collected by and hosted on G2.com.

Mayank J.

Endpoint Security Specialist

Mid-Market (51-1000 emp.)

6/9/2023

"InsightVM(Nexpose) : A powerful tool for Vulnerability management, Tried and Tested."

4.5/5

What do you like best about InsightVM (Nexpose)?

I've used this product for more than a year, and I can state with pride that it makes vulnerability management incredibly simple. Comparatively speaking to other solutions on the market, the UI is user-friendly and simple to comprehend. This tool makes it crystal evident where the weaknesses are and what needs to be given top priority. For the vulnerability and patch management team, this tool is highly helpful. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

One thing I found so far that Search feature is a bit slow. Review collected by and hosted on G2.com.

René T.

Enterprise (> 1000 emp.)

7/4/2023

"IVM review"

3.5/5

What do you like best about InsightVM (Nexpose)?

Real risk score based (holistically: vulnerability x asset context), agent and engine, assisted SCCM patching, hardening check, remediation projects, SLAs Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

GUI is immature and inconsistent, Query builder is limited (you would need additional data lake software: Splunk, Power BI etc.), expensive Review collected by and hosted on G2.com.

Dhananjay B.

Technical Lead Specialist

Enterprise (> 1000 emp.)

6/8/2023

"Helped me manage my assets and the whole threat and vulnerability management with ease."

5/5

What do you like best about InsightVM (Nexpose)?

Remediation projects helped a lot in assigning open findings with stakeholders and tracking in live. Assets tagging is another feature that helped me bifurcate and categorized my assets basis their criticality and exposure. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

Memory consumption sometimes is at its peak. Apart from that, compared to other VM tools it has enough features with other tool even dont have as a whole solution. Review collected by and hosted on G2.com.