CloudStack vs Rapid7 InsightCloudSec comparison

Apache and Rapid7 are both solutions in the Cloud Management category. Apache is ranked #7 with an average rating of 8.2, while Rapid7 is ranked #13 with an average rating of 7.8. Apache holds a 2.8% mindshare in CM, compared to Rapid7’s 0.7% mindshare. Additionally, 94% of Apache users are willing to recommend the solution, compared to 87% of Rapid7 users who would recommend it.

CloudStack

Read 34 CloudStack reviews

2,000 Views
1,820 Comparison Views

94% willing to recommend

Rapid7 InsightCloudSec

Read 14 Rapid7 InsightCloudSec reviews

1,819 Views
309 Comparison Views

87% willing to recommend

CloudStack

Rapid7 InsightCloudSec

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 17, 2024

CloudStack and Rapid7 InsightCloudSec are competing in the cloud management and security space. Rapid7 InsightCloudSec appears to hold an advantage due to its comprehensive features and perceived value for investment.

Features: CloudStack provides open-source cloud orchestration, extensive hypervisor support, and flexible integration options. Rapid7 InsightCloudSec offers real-time security monitoring, compliance management, and automation processes that enhance cloud security.

Room for Improvement: CloudStack could improve its user interface and simplify its deployment processes. Rapid7 InsightCloudSec may benefit from enhancing its pricing model and expanding its support for more cloud service providers.

Ease of Deployment and Customer Service: CloudStack offers a flexible, self-service deployment model but may involve a steeper learning curve. Rapid7 InsightCloudSec ensures a streamlined deployment with proactive customer service, allowing faster setup and efficient support.

Pricing and ROI: CloudStack's cost-effective setup and high customization potential provide favorable ROI for tailored configurations. Rapid7 InsightCloudSec, though potentially higher in initial costs, offers strong ROI with its security and compliance features attractive for security-focused enterprises.

To learn more, read our detailed CloudStack vs. Rapid7 InsightCloudSec Report (Updated: December 2025).

Buyer's Guide

CloudStack vs. Rapid7 InsightCloudSec

December 2025

Download the complete report

Helped 879,986 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CloudStack

Ranking in Cloud Management

7th

Average Rating

8.0

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Rapid7 InsightCloudSec

Ranking in Cloud Management

13th

Average Rating

7.8

Reviews Sentiment

6.3

Number of Reviews

Ranking in other categories

Cloud Security Posture Management (CSPM) (14th), Cloud-Native Application Protection Platforms (CNAPP) (10th), AI Observability (6th)

Mindshare comparison

As of January 2026, in the Cloud Management category, the mindshare of CloudStack is 2.8%, down from 6.7% compared to the previous year. The mindshare of Rapid7 InsightCloudSec is 0.7%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Management Market Share Distribution
Product	Market Share (%)
CloudStack	2.8%
Rapid7 InsightCloudSec	0.7%
Other	96.5%

Cloud Management

Featured Reviews

Tharun Kumar Reddy Thamatam

Senior Infrastructure Consultant at Infosys

Achieving seamless infrastructure management with optimized network and user access controls

I believe enhancements could be made in CloudStack, particularly in the management servers. I had the opportunity to collaborate with one of the Apache CloudStack developers, leading to the installation of additional agents for better information retrieval from hypervisors. We implemented configurations, ensuring consistency across hosts and VMs. We also utilized Ansible or YAML files to automate password upgrades during patching activities and database management, showcasing our customization efforts for improvement. For future releases, it would be beneficial if Apache enhanced CloudStack by integrating alerting systems directly. We've had instances where hypervisors experienced overloads without prior alerts, so proactive alerts within the tool would better prepare us for addressing issues swiftly, preventing disruption in business operations. A portal summarizing system metrics alongside alert capabilities would greatly enhance our operational efficiency.

Read full review

Arun Babu

SOC analyst at a media company with 1,001-5,000 employees

Daily endpoint monitoring has improved investigations and saved time but detection rules still need tuning

It is important to note that Rapid7 InsightCloudSec's features are not 100% precise, but I find about 70% of the time it is satisfactory. I would like to suggest that you improve it to be more precise, ideally making it 100% if possible. Some cases in Rapid7 InsightCloudSec indicate that the log is not enough, as they mostly just generate alerts, and the synchronization between data connectors is often problematic, particularly in terms of not being in sync always, especially between the AD and Rapid7 alerts, which generates numerous false positives. Additionally, the traditional rules should be updated, as this is a main point worth mentioning since we spend a lot of time fine-tuning these traditional rules. I suggest improving the legacy detection rules. If there are any authentication cases, such as impossible travel activity where a user has their SharePoint hosted in a different location, Rapid7 can often trigger alerts, creating confusion as we cannot fine-tune it properly. Another issue is with honeypot access. We sometimes lack necessary logs because Defender's advanced threat protection scanning gets detected as honeypot activity by Rapid7, leading to annoying and noisy alerts that we need to constantly close. If you can improve the traditional detection rules to reflect current detection rules, it would make it significantly easier for us to manage, as we constantly need to check legacy rules to update or possibly turn them off. Updating the legacy rules should be a priority.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"CloudStack provides an environment that is very simple to use, with built-in APIs and a web interface that supports almost all features of AWS and Azure."

"The platform is very simple to scale-out."

"We had a relevant reduction of bureaucracy tasks."

"Killer features for me were: support for many hypervisors, ability to match business logic, "everything in one box," available APIs."

"Valuable features include that it is a user-friendly portal, VPN P2S and S2S possibilities, and it's easy to manage accounts and limits."

"CloudStack, by default, gives us a zone-based setup which makes it easier to manage datacenters located in different geographical areas."

"You can use a single API to get things done, rather than multiple APIs on multiple modules."

"The API with CloudStack made integration into various external facing web applications simple enough."

More CloudStack pros

"After implementing Rapid7 InsightCloudSec, we increased our CIS benchmark score from 48 to around 88 after addressing missing patches on some VM instances, indicating a significant positive impact."

"The tool provides centralized visibility through dashboards and alerts, allowing customers to receive reports on cloud vulnerabilities and security posture. Rapid7 InsightCloudSec provides customers with a robust understanding of cloud security."

"It runs every hour and has been reliable since I started."

"Since implementing Rapid7 InsightCloudSec, manual cloud security checks have been reduced by around forty to fifty percent, and mean time to resolve misconfigurations has dropped from several hours to under thirty minutes on average, significantly improving efficiency and client confidence."

"Rapid7 InsightCloudSec has positively impacted my organization because we are using Microsoft Defender for endpoint protection alongside Rapid7."

"Rapid7 InsightCloudSec has helped us save thirty percent time in our log retrievals, and it completely changed log searching, making it really fast when we search for logs, with no prior knowledge required."

"Agentless scanning is a possible use with Rapid7 InsightCloudSec."

"The best features Rapid7 InsightCloudSec offers include more automation remediation, compliance reporting for auditing, improvement on multi-cloud governance, and cost visibility, which really stand out to me."

More Rapid7 InsightCloudSec pros

Cons

"The user can't upload SSH keys from the UI. We have to use the API for this, and it is not always convenient."

"The numerous, multi-layered drill-down menus make it difficult to find one simple knob to turn."

"From time to time there is a bug in calculating limits of resources for customer domain/account. Maybe it’s a problem with 4.9.2."

"We did encounter issues with stability, and the main issue was secondary storage. When it is not available, XenServers and hypervisors are affected. And CS doesn’t do anything to reboot, or fix. Come to think of it, maybe it shouldn’t, considering their approach – CS just orchestrates everything else on the hypervisor and storage level."

"I think that container technology in CloudStack is an area that needs to be improved."

"It's really hard to delete zones, clusters, datacenters. You need to follow strict rules, which were not properly documented at the time."

"I encountered some stability issues. When I tried to remove high-capacity virtual machines it took a long time to update, and sometimes the VM status failed to update properly in the cloud database. This occurred multiple times, even though I had sufficient resources."

"For future releases, it would be beneficial if Apache enhanced CloudStack by integrating alerting systems directly. We've had instances where hypervisors experienced overloads without prior alerts, so proactive alerts within the tool would better prepare us for addressing issues swiftly, preventing disruption in business operations."

More CloudStack cons

"For a first-time user who starts using Rapid7 InsightCloudSec, it is somewhat complicated to navigate through the UI and search for logs or vulnerabilities, so this is one aspect that could be improved."

"Technical support could be better. It could also be easier, more user-friendly, and intuitive. The API keys aren't easy to understand, and the cloud layouts aren't intuitive and user-friendly. We should be able to integrate IM governance and APIs into non-compliant workloads like legacy solutions."

"I would say that because Rapid7 InsightCloudSec does not have automatic patching capabilities, it provides recommendations, but it does not execute anything from within Rapid7 InsightCloudSec."

"Rapid7 InsightCloudSec can be improved by seeing reductions and improvements in prioritization, tuning findings, suppressing low-value alerts, and better prioritizing the most critical risks."

"The overall UI/UX needs improvement, as performance and speed can also become a concern when scaling large environments or pulling reports, which can sometimes lag."

"A couple of modules are missing when compared to other providers, specifically related to some IAM, and the login piece needs improvement."

"Some cases in Rapid7 InsightCloudSec indicate that the log is not enough, as they mostly just generate alerts, and the synchronization between data connectors is often problematic, particularly in terms of not being in sync always, especially between the AD and Rapid7 alerts, which generates numerous false positives."

"The login piece needs improvement."

More Rapid7 InsightCloudSec cons

Pricing and Cost Advice

"There is no license, so the product is free unless you are buying professional technical support services."

"The Apache CloudStack is open source, so you do not have licenses to purchase."

"The solution is open-source and free."

"Give an effort to planning. If possible, contract a specialized consultant company for the initial setup and knowledge transfer."

"CloudStack is an open source solution, so you don't need to pay anything for it. When our company develops something specially for CloudStack, it is donated to the Apache Software Foundation and provided to anyone that wants to use it."

"CloudStack is an open-source product."

"It is a 100% open-source solution needing just an Apache license. Also, there are no hidden fees to be paid."

"As far as I know, CS is still free of charge. If you want to pay some money, Citrix Cloud Platform is based on CS, I think. As for hypervisors – everything as usual, you need to pay for VMware and vCenter. As for XenServer, recently they changed the free feature list, so you may need to pay some money to get useful features like XenMotion."

"We're doing an annual subscription. There are additional expenses, but not within the confines of this platform."

"Companies generally buy this tool because the pricing is not that high."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Management solutions are best for your needs.

See recommendations

879,986 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Educational Organization

10%

Manufacturing Company

Comms Service Provider

Insurance Company

10%

Manufacturing Company

Computer Software Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	13
Midsize Enterprise	6
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	5
Large Enterprise	8

Questions from the Community

What is your experience regarding pricing and costs for CloudStack?

CloudStack is open-source, so there is no cost apart from learning. Billing solutions, if outsourced, come at a moderate cost.

See all answers

What needs improvement with CloudStack?

Enhancements for CloudStack can focus on integrating more hypervisors, as mentioned regarding current features. We're working on a new feature that will allow for certain limited functions, but ove...

See all answers

What is your primary use case for CloudStack?

My usual use cases for CloudStack involve an AWS style private cloud or public cloud. I can deploy an AWS style cloud using the open source tool that is CloudStack. The use case depends on the cust...

See all answers

What do you like most about Rapid7 InsightCloudSec?

The tool provides centralized visibility through dashboards and alerts, allowing customers to receive reports on cloud vulnerabilities and security posture. Rapid7 InsightCloudSec provides customer...

See all answers

What is your experience regarding pricing and costs for Rapid7 InsightCloudSec?

The pricing, setup cost, and licensing for Rapid7 InsightCloudSec are reasonable, and since our organization is growing, I have observed that the more numbers you have, the less costly the product ...

See all answers

What needs improvement with Rapid7 InsightCloudSec?

I would say that because Rapid7 InsightCloudSec does not have automatic patching capabilities, it provides recommendations, but it does not execute anything from within Rapid7 InsightCloudSec. It h...

See all answers

Comparisons

OpenNebula vs CloudStack

Compared 47% of the time

VMware Aria Automation vs CloudStack

Compared 8% of the time

Sangfor HCI - Hyper Converged Infrastructure vs CloudStack

Compared 6% of the time

Nutanix Cloud Infrastructure (NCI) vs CloudStack

Compared 5% of the time

HPE OneSphere vs CloudStack

Compared 5% of the time

More CloudStack Competitors

Wiz vs Rapid7 InsightCloudSec

Compared 25% of the time

Microsoft Defender for Cloud vs Rapid7 InsightCloudSec

Compared 16% of the time

CrowdStrike Falcon Cloud Security vs Rapid7 InsightCloudSec

Compared 14% of the time

AWS Security Hub vs Rapid7 InsightCloudSec

Compared 7% of the time

FortiCNAPP vs Rapid7 InsightCloudSec

Compared 6% of the time

More Rapid7 InsightCloudSec Competitors

Product Reports

Buyer's Guide

CloudStack

January 2026

Download CloudStack product report

Buyer's Guide

Rapid7 InsightCloudSec

December 2025

Download Rapid7 InsightCloudSec product report

Also Known As

Vmops, Cloud.com

DivvyCloud

Overview

Apache CloudStack is open source software designed to deploy and manage large networks of virtual machines, as a highly available, highly scalable Infrastructure as a Service (IaaS) cloud computing platform.

Apache

Rapid7 InsightCloudSec is a comprehensive CSPM tool catering to cloud security across Docker and Kubernetes workloads, ensuring rigorous data classification and protection, focusing on AWS and Azure platforms.

Organizations leverage Rapid7 InsightCloudSec for securing cloud environments, integrating smoothly into Kubernetes settings for extensive security oversight. This tool addresses data protection with governance and access controls, providing centralized visibility and alert mechanisms. Users depend on its threat detection capabilities, easing data security management on AWS and Azure. The platform integrates automated processes and agentless scanning to foster an understanding of cloud security dynamics. Enhancements in CNAPP management and more intuitive interfaces could further streamline its use.

What are the most important features of Rapid7 InsightCloudSec?

Security Frameworks: Offers structured systems to enforce security policies across cloud environments.
Agentless Scanning: Provides insights without deploying agents, simplifying operations.
Automation: Streamlines routine security tasks, enhancing efficiency.
Centralized Visibility: Uses dashboards and alerts for comprehensive monitoring.
Vulnerability Management: Identifies threats with a comprehensive database.

What ROI should users look for in reviews?

Improved Data Security: Enhanced protection across multiple cloud platforms.
Compliance Facilitation: Helps meet regulatory standards effortlessly.
Operational Efficiency: Reduces workload with automation and intuitive tools.
Threat Prevention: Proactively manages vulnerabilities.

In financial sectors, Rapid7 InsightCloudSec is critical for safeguarding sensitive information and ensuring compliance. Healthcare industries use it to protect patient data, adhering to strict regulatory standards. E-commerce businesses appreciate its ability to secure transaction data while maintaining service availability through reliable threat detection and mitigation strategies.

Rapid7

Sample Customers

GreenQloud, Exoscale, TomTom, ASG, PC Extreme, ISWest, Grid'5000

Fannie Mae, 3M, PizzaHut, Spotify, Autodesk, Discovery

Buyer's Guide

CloudStack vs. Rapid7 InsightCloudSec

December 2025

Free Report: CloudStack vs. Rapid7 InsightCloudSec

Find out what your peers are saying about CloudStack vs. Rapid7 InsightCloudSec and other solutions. Updated: December 2025.

DOWNLOAD NOW

879,986 professionals have used our research since 2012.

See our CloudStack vs. Rapid7 InsightCloudSec report.

See our list of best Cloud Management vendors.

We monitor all Cloud Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.