InsightVM (Nexpose) Reviews & Product Details

InsightVM is Rapid7’s vulnerability risk management offering that advances security through cross-department clarity, a deeper understanding of risk, and measurable progress. By informing and aligning technical teams, security teams can remediate vulnerabilities and build Security into the core of the organization. With InsightVM, security teams can: Gain Clarity Into Risk and Across Teams Better understand the risk in your modern environment so you can work in lockstep with technical teams. Extend Security’s Influence Align traditionally siloed teams and drive impact with the shared view and common language of InsightVM. See Shared Progress Take a proactive approach to security with tracking and metrics that create accountability and recognize progress.

Seller

Rapid7

Discussions

InsightVM (Nexpose) Community

Languages Supported

English

Solution Type

All-in-One

Overview by

Lisa Ochoa

Top-Rated Alternatives

Tenable Vulnerability Management

4.6/5(156)

Tenable Security Center

4.6/5(84)

Tenable Nessus

4.5/5(321)

View All Alternatives

User Insights

Average based on 81 real user reviews.

Implementation Time

2 months

Perceived Cost

$$$$$

Typical contract price

$0k - $0k

Per Year

InsightVM (Nexpose) Integrations

(1)

Integration information sourced from real user reviews.

G2 reviews are authentic and verified.

Here's how.

Michael T.

Head of Service Delivery

Mid-Market (51-1000 emp.)

4/12/2022

"Easy to use, not so easy to setup"

4/5

What do you like best about InsightVM (Nexpose)?

Easy to use once installed - it's pretty well a "set and forget" system that you don't need to constantly update or adjust. Interface is relatively easy to use. InsightVM has lots of features to keep your security analysts happy for days on end. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

Requires an on-prem management console (not just scan engine) if you have on-prem assets that need to be scanned. Requires in-depth knowledge to install and get up and running. Review collected by and hosted on G2.com.

Siva K.

Specialist - Vulnerability Management

Enterprise (> 1000 emp.)

Originally submitted 4/7/2022

"InsightVM Experience"

5/5

What do you like best about InsightVM (Nexpose)?

The policy builder is one of the great features Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

A more convincing way of removing the assets in bulk would be great Review collected by and hosted on G2.com.

Lem R.

Systems Engineer - Cybersecurity Analyst

Enterprise (> 1000 emp.)

3/30/2021

"InsightVM (Nexpose) Review"

4.5/5

What do you like best about InsightVM (Nexpose)?

I like how InsightVM does a deeper vulnerability scan of all assets that have an IP address in our network. Network devices, hosts, IoTs, phones, etc. InsightVM also integrates very well with InsightIDR SIEM and Insight Anyconnect to remediate issues it finds. I also like how it integrates with SCCM which makes it easier for us to remediate and automate things. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

InsightVM for some reason had issues resolving licensing count in our deployment as well as doing exclusions when manually creating a scan group. The ability to create a scan group exclusion is critical because we use a guest network and during an IP range scanning, these devices are also reported by InsightVM. Review collected by and hosted on G2.com.

Recommendations to others considering InsightVM (Nexpose):

As a recommendation for others considering InsightVM, run a longer POC of the system and see how it works. Line up a test system and play with all the settings. The product is solid and the support is top-notch. InsightVM is a great tool for any vulnerability management process. Review collected by and hosted on G2.com.

What problems is InsightVM (Nexpose) solving and how is that benefiting you?

We mostly used InsightVM for the vulnerability management of our servers and workstation environment. Using InsightVM allowed us to find obsolete software we've already forgotten as well as helping us keep our Windows environment updated with current patches. Review collected by and hosted on G2.com.

Michael B.

Server Engineer

Enterprise (> 1000 emp.)

3/30/2021

"InsightVM simplified vulnerability Management and outlines a plan for IT without big infosec teams"

4.5/5

What do you like best about InsightVM (Nexpose)?

InsightVM gave us the ability to bring together several log systems and freed up our time to concentrate on the high value issues and single out the highest risk assets in the environment as well as justify removing Java from the environment that one team required an out of date version for an application. Real actionable data to provide to management to make changes in security policy. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

We did not have any negative experiences during deployment and use. We do still have issues with the web platform and missing features compared to the on premises server, but that is minor compared to what we have gained from the platform. Review collected by and hosted on G2.com.

Michael E.

IT Security Analyst

Mid-Market (51-1000 emp.)

Originally submitted 9/15/2020

"The benchmark for success with vulnerability management"

5/5

What do you like best about InsightVM (Nexpose)?

InsightVM gives our team the ability to rapidly scan our entire environment without creating a ton of noise in our SIEM tool while still providing accurate and timely vulnerability findings. The reporting and automation is top notch and really allows us to pin point where vulnerabilities are and what needs to be prioritized. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

Dashboards can be a bit confusing to setup for first time users on the Insight Platform Review collected by and hosted on G2.com.

Recommendations to others considering InsightVM (Nexpose):

If you are considering another product, consider true risk management, not just check the box scanning needs along with cost associated. It's easy to come to the conclusion that InsightVM is the superior product in this space. Review collected by and hosted on G2.com.

What problems is InsightVM (Nexpose) solving and how is that benefiting you?

We are finding issues that prior products simply didn't show us or provide us with a way to prioritize remediation. InsightVM does both without issue. Review collected by and hosted on G2.com.

Ryan C.

IT Security Analyst III

Mid-Market (51-1000 emp.)

Originally submitted 10/1/2020

"Decent for smaller teams, but could use some tweaking"

3.5/5

What do you like best about InsightVM (Nexpose)?

Ease of use and on-prem option. The agent also fills in for the InsightIDR collector. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

We had constant issues of assets showing up multiple times, and were never correlated/de-duped. Review collected by and hosted on G2.com.

Recommendations to others considering InsightVM (Nexpose):

Keep in mind that this is a pretty inflexible software. If it works for you, it works FANTASTIC. If you need any customization at all (such as reports), you might not like the results. Review collected by and hosted on G2.com.

What problems is InsightVM (Nexpose) solving and how is that benefiting you?

We needed to know about high and critical vulnerabilities of our systems. Review collected by and hosted on G2.com.

Federico G.

Consultor Senior en seguridad de la información

Small-Business (50 or fewer emp.)

2/11/2021

Business partner of the seller or seller's competitor, not included in G2 scores.

"Insight VM useful experience in vulnerability management"

5/5

What do you like best about InsightVM (Nexpose)?

IVM has a remediation projects, a section that is a helpful tool to follow vulns state during periods between scan jobs, we can review the vulns state per group (servers, apps, workstations, others), and the person in charge and is possible to add comments and approve the remediation actions and do additional tests to confirm. This feature reduces the workload in management and is the most effective strategy. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

Sometimes different areas have different needs and we must prepare very customizable reports for each one, sometimes the person in charge changes the idea and requests a new report with other information. Review collected by and hosted on G2.com.

What problems is InsightVM (Nexpose) solving and how is that benefiting you?

We solved that with a single tool that can scan internal and external IP addresses, virtualized and cloud objectives. We have a better useful management for remediation projects with third-party integrations, this information can be exported to other solutions like SIEM, or Metasploit and it is easier to perform complex tasks. Review collected by and hosted on G2.com.

chris d.

Information Security Specialist

Enterprise (> 1000 emp.)

2/10/2021

"Switched to IVM and never looked back"

5/5

What do you like best about InsightVM (Nexpose)?

IVM is very easy to use and intuitive. From setting up sites, to creating asset groups, to tagging, it all makes sense. Granted there are deeper features to learn about, especially those related to the cloud-based features such as Remediation Projects. I've used IVM for about 3 years and I continually find new ways to use the product and R7 is consistently adding new features, so there's always a new way to use the product. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

While it isn't an easy ask, the remediation instructions can be improved on. Granted it can be difficult when there are numerous operating systems, along with their associated versions, especially when you get into the Linux world. This can be helpful for teams that are not experienced with security or are less technically knowledgeable. Review collected by and hosted on G2.com.

Recommendations to others considering InsightVM (Nexpose):

As with any product, ensure that it meets your needs and fills gaps that you may have. IVM won't be a magic bullet, but it will point you in the right direction and will help your security team with vulnerability remediation. Rapid 7 has also kept those that are outside of security in mind. With the proper knowledge, remediation projects, goals, reports, and asset groups can all be used to ensure other technical teams have the information they need to fix any issues identified in IVM. Review collected by and hosted on G2.com.

What problems is InsightVM (Nexpose) solving and how is that benefiting you?

The core of what we are trying to resolve is vulnerability assessment and management. In an enterprise environment this is always a challenge, but additionally we've found it useful for discovery and organization of assets. While IVM isn't designed for asset management, it can certainly help. While our network design isn't typical, it has been helpful to utilize tags to organize and assign remediation responsibilities. Review collected by and hosted on G2.com.

Rohtash S.

Deputy Manager

Enterprise (> 1000 emp.)

5/31/2021

Business partner of the seller or seller's competitor, not included in G2 scores.

"It's a good product and has good capabilities. Easy to use and the console overview is great."

4.5/5

What do you like best about InsightVM (Nexpose)?

The visibility on the console and easy to use is the best thing about Nexpose. The reporting feature is also great. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

Sometimes there are so many false positives and the articles to patch vulnerability as given by Nexpose support does not exist anywhere on the internet. I have few cases that are still pending from Nexpose support from last 1 year and there no update from the support team. Review collected by and hosted on G2.com.

Recommendations to others considering InsightVM (Nexpose):

You can also check Tenable who is a good competitor for Nexpose. The support is not that good but the tool works fine and there are least issues with the product after buying. Review collected by and hosted on G2.com.

What problems is InsightVM (Nexpose) solving and how is that benefiting you?

Well, it gives you the CVE vulnerability of the servers and the resolution too to patch them. Also it is helpful for internal auditing by patching the vulnerability. Review collected by and hosted on G2.com.

Suchibrato M.

Security Analyst

Enterprise (> 1000 emp.)

6/11/2021

"One of the best vm tools"

4.5/5

What do you like best about InsightVM (Nexpose)?

The UI and Ux is top notch. The tool seems easy to work upon but is very powerful. Hassle free site creation and other usages. Review collected by and hosted on G2.com.

What do you dislike about InsightVM (Nexpose)?

Reporting feature could be accumulated directly in a single screen rather than opening another tab and generating manually. Review collected by and hosted on G2.com.