The periodic vulnerability scanning and integration with insightIDR for log correlation. The tool despite being advanced is very easy to use and navigate around.

The risk scoring even though aligns well with what is scored in most popular NVDs. and with remediation projects, it is easier for our team to have a remediation plan and track it easily. Review collected by and hosted on G2.com.

The CVE scoring is a bit inconsistent and below industry standard Review collected by and hosted on G2.com.

able to track vulnerability age for compliance Review collected by and hosted on G2.com.

not able to sort using organisational criticality rating and needing to use query for it which only works as a report. not able to view a list of assets instead of grouped up vulnerabilities in the vulnerability tracker, also the solutions are not specific enough to resolve the vulnerabilities. Review collected by and hosted on G2.com.

InsightVM is a comprehensive, end-to-end vulnerability detection and management platform that helps you fully understand your remediation priorities. Review collected by and hosted on G2.com.

InsightVM is really great, the only thing it really lacks is a built-in remediation component for installing patches. Review collected by and hosted on G2.com.

I like InsightVM’s clear, actionable risk scoring and live dashboards that keep asset exposure prioritized and up to date. Review collected by and hosted on G2.com.

Some scans and dashboards can feel heavy at scale, and custom reporting and tagging rules sometimes require extra tuning to get right. Review collected by and hosted on G2.com.

InsightVM offers real-time visibility into the entire network, enabling continuous monitoring and immediate detection of vulnerabilities as they appear. It integrates seamlessly with various other security tools and systems, such as SIEMs, ticketing systems, and DevOps tools, facilitating a more streamlined security workflow. The tool supports automated remediation workflows, which can significantly reduce the time and effort required to address vulnerabilities. Review collected by and hosted on G2.com.

You will get difficulty during initial setup as the setup is complex. Cost is very high compared to other tools. Some users have experienced false positives in the scan results, which can lead to unnecessary remediation efforts and wasted resources. Review collected by and hosted on G2.com.

Vulnerability views

Reporting

Dashboards

Tons of threat intelligence and research data integrated with the product by Rapid7. Stuff like Metasploit DB, AttackerKB and project Heisenberg are some of the best integrations.

Remediation Projects

Risk Scoring - the new Active Risk Scoring is awesome.

Scan Assistant (probably the best service for vuln scanning) Review collected by and hosted on G2.com.

The security console is a lot buggy.

Native Jira integration is not really native. Breaks all the time.

Sometimes it takes days to identify some vulnerabilities which is a major drawback especially for critical vulnerabilities (Jetbrains TeamCity CVSS10 vuln is one example, took it 3 days to identify vulnerable assets)

Too much administrative efforts to setup stuff. Review collected by and hosted on G2.com.

I have been using this product for more than 6 years and it's the best product for vulnerability management. They keep track of all zero-days and update their database against all newly listed CVEs within 24 hours. It offers an all-in-one dashboard with multiple widgets Review collected by and hosted on G2.com.

Integration with external ticketing tool is limited Review collected by and hosted on G2.com.

InsightVM is providing Agent based scanning which helps us alot, apart from that Dashboard is also very cool and helps alot in easily go throught the stats. Review collected by and hosted on G2.com.

There is nothing to dislike apart from Memory consumption is sometimes getting very high. Review collected by and hosted on G2.com.

InsightVM efficiently manages our cloud workloads through its robust agent installation. We can overview and scan all our images at various stages in deployment. We can also identify potential risks and prioritize handling vulnerabilities in our infrastructure. Since it is an agent-based platform, we can conveniently focus on our enhancements and let InsightVM take care of the underlying dependencies. Review collected by and hosted on G2.com.

We need to keep track of our resource consumption & take suitable approaches for optimization. This can be tedious while working on InsightVM, but with adequate exposure, it's possible to make the best out of its functionalities. We can build a resilient infrastructure to meet security compliances in our SDLC with InsightCM. Review collected by and hosted on G2.com.

Easy to manage, good capabilities, agent and network scan works as intended. A good way to remediate vulnerabilities using Remediation projects and set proper Goal and SLAs. A good reporting available to use Review collected by and hosted on G2.com.

Managing multiple scan jobs and tagging of assets as not granular for very big enterprise organizations. Some network scans can cause network issues for the endpoints. Review collected by and hosted on G2.com.