No more typing reviews! Try our Samantha, our new voice AI agent.

Brinqa vs Rapid7 InsightVM comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
11th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
40
Ranking in other categories
Container Security (11th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (6th)
Brinqa
Ranking in Vulnerability Management
60th
Average Rating
7.0
Reviews Sentiment
6.8
Number of Reviews
1
Ranking in other categories
Cloud Security Posture Management (CSPM) (53rd), Attack Surface Management (ASM) (50th), Risk-Based Vulnerability Management (20th)
Rapid7 InsightVM
Ranking in Vulnerability Management
12th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
66
Ranking in other categories
Risk-Based Vulnerability Management (4th)
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
RB
Cybersecurity Director at RB Consultancy
Allows us to configure the risk algorithm to suit our specific needs
I would give the easiness of the initial setup a seven out of ten. It can be a bit complex. Some connections are straightforward, but some take a long time. Deploying Brinqa took time, as it was done in phases. Initially, it took about six months before we started getting valuable data from it. Then, it expanded from there. The deployment began with a product demo and contract negotiation. We connected some data sources to Brinqa's cloud service, which was straightforward. We used the default risk ranking algorithm but faced issues with the dashboards, so we customized them to fit our organization's needs over a few years. We depended a lot on Brinqa for the deployment. We had some internal resources, but they lacked the needed skills, so it took time to train our two-man team. Initially, it required one person for maintenance, and they spent most of their time on it.
reviewer2775840 - PeerSpot reviewer
Manager at a financial services firm with 5,001-10,000 employees
Manages vulnerabilities effectively over time but needs improvement in web coverage and dashboard flexibility
Most of the dynamic asset tagging we use is manual, not dynamic. To manage the assets, we employed the manual approach because we have a limitation regarding the license, so we don't use the dynamic approach much. I don't know how the configuration assessment has assisted with meeting compliance standards. The product that we use is the on-premise solution where we configure assets and dynamically scan them. However, we use the default policies more, the template, so Rapid7 InsightVM on-premise version is not that effective in the web-related systems. However, it is best on the OS to identify and discover the OS-related vulnerabilities, more of open ports and the discovery of vulnerable ports or services. It would be better to improve Rapid7 InsightVM by including or working better to add web-related templates because it's not that effective in regard to web. I don't know if they may have a separate product regarding the web, but for the on-premise type, they are not strong in this area. I would prefer to see web-related templates in addition to improving the dashboard-related things because the dashboard has been constant for a very long time. It would be better to see various kinds of, perhaps a flexible type of dashboard. If it's not customizable at all, I would want to see the risk and asset over time with more flexibility. The current dashboard is not flexible in this regard; I have to dig down every day, so they should work on this as well, in addition to the web.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is a cloud-native app that integrates with both IaaS and SaaS. It seamlessly integrates with other platforms."
"Its dashboards are brilliant. It provides in-depth insights."
"One of the most valuable features of Qualys TotalCloud is FlexScan, which is specifically for internet-facing VMs. We found this feature to be very useful. It was a key differentiator for us."
"Qualys TotalCloud provides unified vulnerability and threat assessment for IaaS and SaaS and a single prioritized view of risk, which helps reduce my workload by not having to combine multiple sources."
"TotalCloud provides the easiest and the best approach for cloud infrastructure management."
"I like the web API security and IoT scanning features the most. The user-friendly design of TotalCloud's interface enables customers to navigate it and use its full potential easily"
"If I had to say something positive about the product that brings me the biggest benefit, I would say it has accurate reports, gets new update CVEs, zero-day attack detection, and is easy to manage with its GUI."
"I would definitely recommend it because it is easy to handle any cloud resources."
"The most valuable features of Brinqa are its data integration capabilities."
"It's very scalable."
"Rapid 7 is a leading solution that has been implemented in many companies."
"We can create our own templates."
"InsightVM has a very organized GUI with ease of use."
"Rapid7 InsightVM has very low false positives, so you don't have to go in manually and verify them."
"When it comes to the process, installation is very easy and does not take long."
"The most important aspect of the solution is that it rarely gives false positives, especially compared to other products. It provides very clear reports for our IT teams to look at."
"You can bring in and get online to do reports fairly quickly,"
 

Cons

"The onboarding process is a bit difficult. In the initial phase, it is very difficult to understand the features, what the dashboard contains, and what criteria they are using."
"The response part of the Cloud Detection and Response (CDR) module can be improved."
"An area for improvement would be to focus on risks related to AI, such as large language models and potential data leakage."
"I sometimes have difficulty detecting or uninstalling certain versions of applications, which I have to do manually."
"We encountered challenges identifying the correct resource category for certain items, such as those in containers or storage."
"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."
"There is a lack of data segregation according to criticality or inventory."
"The price is very expensive, actually."
"Brinqa could improve in terms of the speed of their service and resource provision."
"There have been instances where technical support takes a long time to update the status of a ticket, which is something that can be improved."
"It gives false positives at times, and this a problem. It causes problems with reporting."
"Customer service needs significant improvement. There are delays in support response times, and support is not available promptly, especially when issues are escalated to another region."
"Their customer support is really bad. On a scale of 1 to 10 I would probably give it a 1."
"The reporting could be better."
"This solution integrates with another module in Metasploit, that doesn't exist in the other solutions. It is subscribed to on our roadmap, but we chose to implement both Nexppose and AppSpider."
"We are a registered reseller and a trusted partner. However, for us to get any support from them I can't log a call directly with Rapid7 InsightVM. I have to work with the distributor to log the call for me."
"There is a significant learning curve, that non-technical individuals, especially those not specialized in computer science or the information security industry, might face."
 

Pricing and Cost Advice

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
"Qualys TotalCloud is expensive."
"The cost is high, but it meets our organizational needs."
"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"TotalCloud's price is about right where I would expect it to be."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
Information not available
"This solution is expensive, but it's fine for us as we have an open budget for security solutions. Protection and having the system secured is more important."
"In some cases, we procure the licenses. In some cases, the customers directly buy the license from Rapid7."
"Its licensing is yearly. Everything is included in the price for one year."
"The product is cheaper than the other similar tools available in the market."
"It is pretty expensive. It depends on what you consider pricey, however, if you only look at vulnerability management solutions, such as within VM or VMDR, there are, I suppose the prices are almost the same. But I believe you will discover that for yourself."
"Our licensing costs are somewhere around $40,000 annually. There are no additional fees."
"We have an annual license to use Rapid7 InsightVM and if we want to extend it, we will possibly choose more than one year."
"The price of the solution is less than the competitors."
report
Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.
906,852 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
15%
Financial Services Firm
12%
Outsourcing Company
11%
Comms Service Provider
7%
Financial Services Firm
14%
Retailer
13%
Construction Company
9%
Computer Software Company
6%
Financial Services Firm
12%
Manufacturing Company
8%
Computer Software Company
7%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise5
Large Enterprise30
No data available
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise14
Large Enterprise25
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...
What is your primary use case for Qualys TotalCloud?
Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...
Ask a question
Earn 20 points
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. Yo...
What is your experience regarding pricing and costs for Rapid7 InsightVM?
My experience with the pricing, setup cost, and licensing is that both the setup cost and licensing are great.
What needs improvement with Rapid7 InsightVM?
To improve Rapid7 InsightVM, I wish to have integration with patching systems, which would be useful to us. The usabi...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
InsightVM, NeXpose
 

Overview

 

Sample Customers

Information Not Available
Depository Trust and Clearing Corporation
ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
Find out what your peers are saying about Qualys, Horizon3.ai, Tenable and others in Risk-Based Vulnerability Management. Updated: June 2026.
906,852 professionals have used our research since 2012.