


Rapid7 Metasploit and Check Point Cloud Firewall are prominent in the cybersecurity market. While Metasploit stands out in penetration testing, Check Point excels in advanced threat prevention and cloud security.
Features: Rapid7 Metasploit includes a comprehensive exploit database, automation features, and seamless integration with third-party tools, ideal for penetration testing and vulnerability exploitation. Check Point Cloud Firewall offers advanced threat prevention, centralized management, and extensive integration across hybrid and multi-cloud environments, providing a unified security approach.
Room for Improvement: Rapid7 Metasploit can improve by enhancing user-friendly features, including graphical interface improvements and faster exploit updates. Check Point Cloud Firewall may benefit from better API integration, improved PaaS service support, and a more intuitive user interface. Users note deployment complexities and high pricing require improvement.
Ease of Deployment and Customer Service: Rapid7 Metasploit is used in on-premises and hybrid setups, with limited official support for the free version. Some users report delays in response times. Check Point Cloud Firewall, deployed in hybrid and public cloud environments, provides consistent support, benefiting from an extensive support network, although feature deployment can require extensive support.
Pricing and ROI: Rapid7 Metasploit is more cost-effective, particularly due to its free version, saving costs in penetration testing. Check Point Cloud Firewall delivers significant security benefits but is often considered expensive, with complex licensing models. Pricing is a key consideration, yet product value significantly influences satisfaction.
We are able to scan all our assets with less human intervention and achieve overall effective outcomes.
It has saved about 90% of our time.
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
The value lies in maintaining operational integrity with zero downtime or incidents, facilitating secure, ongoing business operations.
The compliance has improved as our overall compliance score against CIS benchmark has improved from around 72 to 92% within the first three months of adoption.
This helped my team cut manual review time by roughly twenty to twenty-five percent, allowing me to reallocate effort to proactive cloud security improvements.
Metasploit has helped save time, especially with testing websites or VIPD projects.
The ROI can be very rapid for organizations using vulnerability assessment for the first time.
On a scale from one to ten, I would rate customer support a ten.
The technical support from Qualys is excellent, always available 24/7 for any urgent needs.
The technical support team is strong and helpful in solving issues promptly.
They usually respond quite fast, and they are very knowledgeable about what they do.
We had an endless loop of emails trying to fix this, and the suggestion was to reinstall the gateway and do it from scratch, which was not an option at that point because it would leave that specific location without access.
I think TAC of Check Point Cloud Firewall (formerly CloudGuard Network Security) is very competent; they really know what they are doing.
Rapid7 sometimes struggles with queries from non-security people, whereas Tenable is more patient.
The customer support is excellent
I would rate its scalability a ten out of ten.
The scalability of Qualys TotalCloud is excellent, and I would rate it as ten out of ten.
For scalability, I would rate it a ten out of ten.
Visibility scales without performance issues as my environment expands.
It is capable of managing the increased load and performs well as our needs expand.
I can deploy it everywhere I need it.
Metasploit can handle big projects and is already prepared for them.
Rapid7 Metasploit is highly scalable.
Rapid7 Metasploit has limited scalability based on my experience, as the customer receives the full functionality of the product with the license.
It has a lot of scanning mechanisms, which are agentless APIs, eBPF, and cloud agents, that are highly reliable.
I would rate it a ten out of ten for stability.
We have not encountered any lagging or crashing from the tool.
The firewall itself, Gaia itself, tells you: "Look, there is this error, this problem; verify if your device is affected; if so, here is the solution."
If there are errors, it is sometimes challenging to elaborate or troubleshoot since it is not transparent enough to understand what to search for.
I have not observed any downtime.
I have never faced any technical issues or downtimes.
I find Metasploit to be very stable, and I would rate its stability as a nine out of ten.
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
If we find a critical or high vulnerability on an IP or server, the remediation steps should be communicated clearly.
Scalability could be improved as well; needing to purchase a new license each time I want to add a new interface is not ideal.
Better documentation would be welcome.
It would be helpful to have a clear explanation of why the traffic was blocked and what policy or configuration caused it, especially in larger cloud environments.
While you can check the vulnerability, and the system will tell you there is no vulnerability, usually, a human can change one, two, or three parameters and using the same technique and the same scripts can break the system.
The database is not always updated with the latest vulnerabilities or zero-day exploits.
The time taken to fetch reports based on the number of events can be extensive.
In our case, replacing the tool will give us better functionalities without increasing the cost compared to what we pay today for the competitor.
Qualys TotalCloud offers good pricing that is affordable and competitive with the market.
Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform.
The pricing and licensing are expensive, costing between seven thousand to eight thousand dollars.
Check Point is expensive, however, with the features and capabilities, I can justify the cost.
It is the highest in the market.
The cost is approximately $15 per device.
Metasploit is cheaper than Nessus and offers a more robust community edition that provides a good experience for studying Metasploit.
After that, they usually purchase the commercial part of the solution due to its deep integration with InsightVM.
The AI enhancements simplify vulnerability management by eliminating the need for SQL queries to create policies.
For example, if some machines have open vulnerabilities and the remediation team resolves them, the on-demand feature allows us to verify vulnerability resolution promptly.
Qualys TotalCloud is also used to provide unified vulnerability and threat assessment across both IaaS and SaaS.
One of the most valuable features is the automated threat prevention, which helps us detect and block potential cyberattacks in real-time, minimizing data breaches.
Centralized management is the feature I like best, resulting in reduced workload and more continuous policy.
Network Security provides us with unified security management across hybrid and cloud as well as on-prem.
Rapid7 offers comprehensive features within one platform, eliminating the need to integrate multiple tools to see all alerts in one place.
InsightVM searches for potential threats and vulnerabilities of the infrastructure, and after that, Rapid7 Metasploit validates whether we can break the system using this vulnerability or threat, serving as a validator component of the InsightVM solution.
The most valuable features of Metasploit include its powerful capabilities for exploitation and scanning.
| Product | Mindshare (%) |
|---|---|
| Qualys TotalCloud | 1.2% |
| Check Point Cloud Firewall (formerly CloudGuard Network Security) | 1.5% |
| Rapid7 Metasploit | 2.0% |
| Other | 95.3% |

| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 11 |
| Large Enterprise | 39 |
| Company Size | Count |
|---|---|
| Small Business | 133 |
| Midsize Enterprise | 56 |
| Large Enterprise | 146 |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 4 |
| Large Enterprise | 12 |
Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.
Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.
What are the most important features of Qualys TotalCloud?Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.
Check Point Cloud Firewall, previously known as CloudGuard Network Security, provides advanced threat prevention, centralized management, and VPN capabilities, enabling robust cloud security across various platforms including Azure and AWS.
Check Point Cloud Firewall delivers seamless cloud integration with advanced automated threat prevention and centralized management to enhance security posture. It offers auto-scaling for dynamic environments and a comprehensive policy enforcement framework in hybrid settings. The unified interface streamlines administration across cloud infrastructures, ensuring consistent protection and reducing risk.
What important features does it offer?In manufacturing and conglomerate sectors, Check Point Cloud Firewall is utilized for protecting cloud environments and implementing network segmentation. It supports secure cloud migration on AWS, Azure, and GCP, ensuring compliance, perimeter defense, and traffic inspection, facilitating sophisticated threat prevention strategies.
Rapid7 Metasploit provides robust exploitation capabilities, vulnerability assessment, and seamless integration with InsightVM, enhancing penetration testing and security awareness.
Rapid7 Metasploit stands out in the cybersecurity sphere for its extensive exploit modules and automated testing processes. It supports multiple interfaces and databases, simplifying exploit development and facilitating network scanning through integration with Nmap. Its emphasis on vulnerability discovery and incident detection positions it as a key tool in various IT environments, despite limitations in GUI effectiveness and exploit update speeds.
What are the key features of Rapid7 Metasploit?In industries such as government and education, Rapid7 Metasploit integrates into security protocols and training programs. Its deployment on platforms like Kali Linux aligns with IP assets for effective scanning and phishing detection. Organizations benefit from its ability to track processes and collaborate securely with entities, enhancing overall cybersecurity readiness.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.