Amazon Inspector vs RSA Archer comparison

Cancel
You must select at least 2 products to compare!
Amazon Web Services (AWS) Logo
439 views|364 comparisons
83% willing to recommend
RSA Logo
3,332 views|1,347 comparisons
92% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Amazon Inspector and RSA Archer based on real PeerSpot user reviews.

Find out in this report how the two IT Vendor Risk Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Amazon Inspector vs. RSA Archer Report (Updated: March 2024).
769,479 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The findings dashboards are neat and easy to understand, offering clear demarcations for different types of findings and detailed insights into specific vulnerabilities and their associated instances. It is not a place where everything is dumped together. It offers an easy-to-understand layout.""The vulnerability discovery is valuable, and they also rank those vulnerabilities for you. So, you could rapidly attack some of the higher, severe vulnerabilities as they pop up, if they do pop up.""The automated vulnerability detection aspect is most valuable.""The integration of Amazon Inspector with other AWS services has enhanced our security. Security Hub is a major asset because it allows us to centralize data from various AWS services. We can integrate third-party tools as well. It is just a single-click option."

More Amazon Inspector Pros →

"The product is very flexible.""Enables development of any application, automation of any workflow including the GRC work processes.""The integrated data model of a one-to-many/many-to-one relationship is quite useful.""Even non-technical people can be masters of the product.""Makes auditing much more convenient.""RSA Archer is a good tool and I have found performing the application, ISMS, and TPRM assessments beneficial.""The last project was for an investment group that was using Excel. Shifting their records from one position to another took approximately 15 minutes. In Archer, we created a workflow for them to leverage it, and they could send the single record with one click to one person within seconds. The whole process went from 15 minutes to two minutes to get the approval for the records. The main purpose of Archer is to just make it easy.""One of the useful features is the ability to connect to various systems in order to accommodate data."

More RSA Archer Pros →

Cons
"It has a limited scope. So, AWS Inspector primarily focuses on the security of the EC2 instance. So, if your architecture includes other AWS services, then you may need to use additional tools for your comprehensive security assessment. So that is one con. Another is, like, we have a dependency on agents.""There is room for improvement in the scanning capabilities. I'd like to see broader coverage in terms of the vulnerabilities detected.""There isn't too much to improve right now. Scanning on demand or as a part of the pipeline versus a post pipeline solution would be good, but it is not a deal breaker by any means.""One major area for improvement is remediation. My team works on remediating findings over time, likely using available patches. However, easier integration with Amazon's patching services would be very helpful."

More Amazon Inspector Cons →

"There were so many problems that we had found. One time, the search index was not working. We also faced slowness in Archer, but I resolved this issue.""Some of the error reporting isn't very clear. When you're looking for information on error codes, you got to do a lot of digging.""The first improvement I would suggest for RSA Archer is a better search feature. The search criteria needs to be improved. Sometimes I do a search and the search doesn't return the exact item I'm looking for. RSA Archer could also be improved by being more user-friendly. Maybe I have been using a limited version of RSA Archer, but I'm not sure whether it has ESG, environmental and social governance. In the next couple of years, ESG is the next feature that will be integrated into GRC tools. I would recommend RSA Archer adds ESG.""The ticket handling process could be improved.""In a future release, there should be an option to upload the main data.""GUI could be improved.""Slow turnaround time from support team.""The user interface needs work. There are many small text boxes, like credit card size's boxes, where we need to input a lot of text. You can't see what you're typing beyond the tiny window, so you have to scroll or type elsewhere and copy-paste it. It's very inconvenient."

More RSA Archer Cons →

Pricing and Cost Advice
  • "It is scaled as you go. There are probably a certain number of scans per month, and there are tiers. If you're under a certain tier, it is free. The second level is pennies, and then all the way up to like a million. So, it has a tiered pricing program. They're pretty good with your initial scanning, and there is room to scale based on being affordable, but it is fairly cheap. There are no additional costs. They pretty much think about it as a pay-per-scan type model."
  • "It's priced according to market standards for its services."
  • "The pricing is very transparent and clear."
  • More Amazon Inspector Pricing and Cost Advice →

  • "The price of RSA Archer is good. The price isn't too high considering it is a leading tool in the market."
  • "As I am a developer and responsible for providing production support, I do not have personal knowledge of the pricing. However, my colleagues claim that it is very expensive in comparison with other tools."
  • "It is not expensive. It is reasonable. We only pay for the licensing."
  • "I am not 100% familiar with that, especially with their new model. I just know that the way they've licensed per user to scale is good."
  • "At the higher end of the price scale, but provides better, more accessible functionality and customization than cheaper products."
  • "Fairly highly-priced, especially for smaller companies."
  • "RSA Archer's price is justifiable and not as expensive, compared to ServiceNow. I have heard that the licensing for ServiceNow is much more expensive. I'm unaware whether there are any additional costs after licensing fees."
  • "The solution is not at all a cheap product."
  • More RSA Archer Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which IT Vendor Risk Management solutions are best for your needs.
    769,479 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The integration of Amazon Inspector with other AWS services has enhanced our security Security Hub is a major asset because it allows us to centralize data from various AWS services. We can… more »
    Top Answer:The pricing is very transparent and clear, so I don't have any challenges with it. It's good.
    Top Answer:There is room for improvement in the scanning capabilities. I'd like to see broader coverage in terms of the vulnerabilities detected. Right now, it's not as comprehensive as some of the third-party… more »
    Top Answer:It has various valuable features. For example, showing us if a control aligns with specific standards or frameworks helps us understand it better and verify its compliance.
    Top Answer:The user interface needs work. There are many small text boxes, like credit card size's boxes, where we need to input a lot of text. You can't see what you're typing beyond the tiny window, so you… more »
    Top Answer:We primarily use the system control module and specific IT control models for ongoing risk assessment activities. We use it on a day-to-day basis.
    Ranking
    Views
    439
    Comparisons
    364
    Reviews
    4
    Average Words per Review
    731
    Rating
    7.8
    Views
    3,332
    Comparisons
    1,347
    Reviews
    8
    Average Words per Review
    418
    Rating
    8.0
    Comparisons
    Also Known As
    Archer
    Learn More
    Overview

    Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Amazon Inspector automatically assesses applications for exposure, vulnerabilities, and deviations from best practices. After performing an assessment, Amazon Inspector produces a detailed list of security findings prioritized by level of severity. These findings can be reviewed directly or as part of detailed assessment reports which are available via the Amazon Inspector console or API.

    Amazon Inspector security assessments help you check for unintended network accessibility of your Amazon EC2 instances and for vulnerabilities on those EC2 instances. Amazon Inspector assessments are offered to you as pre-defined rules packages mapped to common security best practices and vulnerability definitions. Examples of built-in rules include checking for access to your EC2 instances from the internet, remote root login being enabled, or vulnerable software versions installed. These rules are regularly updated by AWS security researchers.

    RSA Archer is a solution designed to help your organization manage policies, controls, risks, assessments, and deficiencies across your lines of business. RSA helps you manage your digital risk with a range of capabilities and expertise including integrated risk management, threat detection and response, identity and access management, as well as fraud prevention.

    The solution also allows you to adapt a broad range of solutions to your requirements and is a good option for both big and small companies.

    RSA Archer Features

    RSA Archer has many valuable key features. Some of the most useful ones include:

    • Application builder
    • Advanced business workflow
    • System integration
    • Search, reports, and dashboards
    • Access control
    • Globalization
    • Audit management
    • Privacy program management
    • Security incident management

    RSA Archer Benefits

    There are many benefits to implementing RSA Archer. Some of the biggest advantages the solution offers include:

    • Taxonomy and data structure: With RSA Archer, you can build and maintain an inventory of personal data processing activities and assets, utilizing a purpose-built taxonomy and data structure.
    • Easy tracking: RSA Archer enables you to track data retention schedules and execute a checklist as it relates to processing activities.
    • Smooth management: By using RSA Archer, you can manage activities related to notifications and consents linked to the processing activity inventory.
    • Improve information assurance programs: RSA Archer enables agencies to improve information assurance programs for continuous monitoring and assessment and authorization.
    • Compliance: By providing compliance management, RSA Archer allows you to consolidate information from multiple regulatory bodies and establish a sustainable, repeatable, and auditable regulatory compliance program.
    • Business continuity: With RSA Archer, you can automate business continuity and disaster recovery planning to protect your organization in the event of a crisis.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by PeerSpot users currently using the RSA Archer solution.

    A Specialist, RSA Archer at a tech services company, says, “RSA Archer is a valuable tool because it can manage the end-to-end functioning of any enterprise GRC module, such as compliance and risk management or business continuity plans and the entire BCM module. RSA Archer also provides many out-of-the-box solutions, which are use cases derived from the standards for GRC or risk management, governance, and compliance. It provides an end-to-end mechanism for business users on a single platform. That includes reporting, managing workflow, creating documentation, or tracking a process where you need to get approval from the various levels within the organization's hierarchy.”

    PeerSpot user Krishnendu S., Vice President at a financial services firm, mentions, "It is enterprise-wide accessible. So, it is very helpful for all the employees in our bank. They can log in and do their risk management activities. It has a few inbuilt modules that are helpful for doing risk management activities, such as issue management, risk identification, risk assessment, and policy exception management. It also has some inbuilt workflows inside these modules. They are also helpful."

    A Sr. Internal Auditor at an energy/utilities company comments, "Its user interface is pretty neat, and there is flexibility in generating the data. You can customize reports at any level. You can directly get reports in Tableau format. If you want to generate statistical data, you can create reports with graphs. There is an adequate amount of flexibility for changing the format, the type of graphs, etc."

    Another PeerSpot user, Manash B., Technology Manager at a tech services company, explains, "RSA is a very rich application. I like its adaptive suggestion, where based on your users and the class of data, it can actually recommend you the proper control to choose. For example, we have been using PCI DSS as an NIST. So based on application feedback, it will provide you with a suggestion on which control objective needs to be set. Based on that, you can make a decision—you don't need to take the suggestion, but you can customize that particular provided suggestion. RSA Archer's workflow is also good, in terms of process automation."

    Sample Customers
    betterment, caplinked, flatiron, university of nutri dame
    T-Systems, Bridge Point, Equifax, First Data, Global Imaging Company, Manulife Financial
    Top Industries
    VISITORS READING REVIEWS
    Computer Software Company14%
    Financial Services Firm12%
    Insurance Company8%
    Educational Organization6%
    REVIEWERS
    Financial Services Firm35%
    Insurance Company10%
    Energy/Utilities Company10%
    Retailer10%
    VISITORS READING REVIEWS
    Educational Organization45%
    Financial Services Firm14%
    Computer Software Company6%
    Manufacturing Company4%
    Company Size
    VISITORS READING REVIEWS
    Small Business17%
    Midsize Enterprise15%
    Large Enterprise68%
    REVIEWERS
    Small Business24%
    Midsize Enterprise14%
    Large Enterprise62%
    VISITORS READING REVIEWS
    Small Business9%
    Midsize Enterprise49%
    Large Enterprise42%
    Buyer's Guide
    Amazon Inspector vs. RSA Archer
    March 2024
    Find out what your peers are saying about Amazon Inspector vs. RSA Archer and other solutions. Updated: March 2024.
    769,479 professionals have used our research since 2012.

    Amazon Inspector is ranked 6th in IT Vendor Risk Management with 4 reviews while RSA Archer is ranked 1st in IT Vendor Risk Management with 38 reviews. Amazon Inspector is rated 7.8, while RSA Archer is rated 8.0. The top reviewer of Amazon Inspector writes "Primarily focuses on security of EC2 instances, provides point-in-time assessments rather than real time protection but provides automated vulnerability detection". On the other hand, the top reviewer of RSA Archer writes "A rich application with good workflow, but search feature needs improvement". Amazon Inspector is most compared with Tenable Vulnerability Management, Tenable Nessus, Microsoft Defender for Cloud, Tenable Cloud Security and JFrog Xray, whereas RSA Archer is most compared with OneTrust GRC, IBM OpenPages, MetricStream, Microsoft Purview Communication Compliance and Workiva Wdesk. See our Amazon Inspector vs. RSA Archer report.

    See our list of best IT Vendor Risk Management vendors.

    We monitor all IT Vendor Risk Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.