No more typing reviews! Try our Samantha, our new voice AI agent.

CloudStack vs Rapid7 InsightCloudSec comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 17, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CloudStack
Ranking in Cloud Management
8th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
Rapid7 InsightCloudSec
Ranking in Cloud Management
12th
Average Rating
7.8
Reviews Sentiment
6.4
Number of Reviews
14
Ranking in other categories
Cloud Security Posture Management (CSPM) (12th), Cloud-Native Application Protection Platforms (CNAPP) (12th), AI Observability (13th)
 

Mindshare comparison

As of November 2026, in the Cloud Management category, the mindshare of CloudStack is 2.2%, down from 3.5% compared to the previous year. The mindshare of Rapid7 InsightCloudSec is 0.9%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Management Mindshare Distribution
ProductMindshare (%)
CloudStack2.2%
Rapid7 InsightCloudSec0.9%
Other96.9%
Cloud Management
 

Featured Reviews

Tharun Kumar Reddy Thamatam - PeerSpot reviewer
Senior Infrastructure Consultant at Infosys
Achieving seamless infrastructure management with optimized network and user access controls
I believe enhancements could be made in CloudStack, particularly in the management servers. I had the opportunity to collaborate with one of the Apache CloudStack developers, leading to the installation of additional agents for better information retrieval from hypervisors. We implemented configurations, ensuring consistency across hosts and VMs. We also utilized Ansible or YAML files to automate password upgrades during patching activities and database management, showcasing our customization efforts for improvement. For future releases, it would be beneficial if Apache enhanced CloudStack by integrating alerting systems directly. We've had instances where hypervisors experienced overloads without prior alerts, so proactive alerts within the tool would better prepare us for addressing issues swiftly, preventing disruption in business operations. A portal summarizing system metrics alongside alert capabilities would greatly enhance our operational efficiency.
Arun Babu - PeerSpot reviewer
SOC analyst at a media company with 1,001-5,000 employees
Daily endpoint monitoring has improved investigations and saved time but detection rules still need tuning
It is important to note that Rapid7 InsightCloudSec's features are not 100% precise, but I find about 70% of the time it is satisfactory. I would like to suggest that you improve it to be more precise, ideally making it 100% if possible. Some cases in Rapid7 InsightCloudSec indicate that the log is not enough, as they mostly just generate alerts, and the synchronization between data connectors is often problematic, particularly in terms of not being in sync always, especially between the AD and Rapid7 alerts, which generates numerous false positives. Additionally, the traditional rules should be updated, as this is a main point worth mentioning since we spend a lot of time fine-tuning these traditional rules. I suggest improving the legacy detection rules. If there are any authentication cases, such as impossible travel activity where a user has their SharePoint hosted in a different location, Rapid7 can often trigger alerts, creating confusion as we cannot fine-tune it properly. Another issue is with honeypot access. We sometimes lack necessary logs because Defender's advanced threat protection scanning gets detected as honeypot activity by Rapid7, leading to annoying and noisy alerts that we need to constantly close. If you can improve the traditional detection rules to reflect current detection rules, it would make it significantly easier for us to manage, as we constantly need to check legacy rules to update or possibly turn them off. Updating the legacy rules should be a priority.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We like the virtualization capabilities."
"We had a relevant reduction of bureaucracy tasks."
"If you are looking for a stable product that is easy to install with a lot of documentation, a portal that is very easy to understand and manage and that can be modified, you should use CloudStack."
"The structuring of the components and isolated environments helped us when using parts of the framework at different levels of product development."
"The back-end database design is simple and straight forward. The user interface is designed with external users in mind. Billing is relatively straightforward with this product. Not being restricted to just one hypervisor was nice."
"It has become easy to deploy new devices with no or minimal hardware changes. Now, a user can be ready to use a firewall within a few minutes, as compared to the traditional physical model which involved purchase, shipping, hardware configuration, cabling, power, etc."
"CloudStack is simple to stand up and get off the ground in a hurry. Its centralized design allows for easier troubleshooting when compared to OpenStack. Out of the box, it’s very well suited for white labeling and IaaS."
"​You can build your own cloud and make it customizable with APIs​."
"I find the security frameworks and security tools valuable. I think they're good in the infrastructure of the code security. They are also good at threat protection."
"The complete checklist covers all the AWS services I use and also has wide checks of the possible misconfigurations or specific vulnerabilities that may affect that service in order to have that wide view of the possible security measures I have to apply in each service."
"Agentless scanning is a possible use with Rapid7 InsightCloudSec."
"The tool's most valuable feature is workload protection for Kubernetes and container security. It has agents that identify bugs or lack of security on runtime containers."
"After implementing Rapid7 InsightCloudSec, we increased our CIS benchmark score from 48 to around 88 after addressing missing patches on some VM instances, indicating a significant positive impact."
"The best features Rapid7 InsightCloudSec offers include more automation remediation, compliance reporting for auditing, improvement on multi-cloud governance, and cost visibility, which really stand out to me."
"ICSE is cheaper compared to other tools and has a pleasant user experience with good support."
"Rapid7 InsightCloudSec impacts the organization positively by acting as a shield against hackers and ransomware, providing effective protection to data and infrastructure."
 

Cons

"Multi-deployments."
"We did encounter issues with stability, and the main issue was secondary storage. When it is not available, XenServers and hypervisors are affected. And CS doesn’t do anything to reboot, or fix. Come to think of it, maybe it shouldn’t, considering their approach – CS just orchestrates everything else on the hypervisor and storage level."
"The product does not have an easily implementable payment gateway."
"The upgrade process can be improved further."
"I would like to see support for native VLAN, and fault-tolerance."
"It is not widely used so Google does not help very much when you are troubleshooting, and the CloudStack forum is not very active."
"A technology upgrade is one item which could be improved upon a lot."
"The area of improvement could be the regionalization aspect. For example, managing multiple regions or HubStack deployments together was not thought out thoroughly in the versions I used. We faced issues around managing the global infrastructure and had to develop around it."
"I'm not impressed with their support right now. Their support model is not really good."
"The tool needs to improve its documentation."
"Some cases in Rapid7 InsightCloudSec indicate that the log is not enough, as they mostly just generate alerts, and the synchronization between data connectors is often problematic, particularly in terms of not being in sync always, especially between the AD and Rapid7 alerts, which generates numerous false positives."
"Rapid7 InsightCloudSec needs to provide more granular search capabilities, such as the ability to search back the last three months."
"The platform could be improved with more customizable dashboards and reporting."
"Rapid7 InsightCloudSec can be improved by seeing reductions and improvements in prioritization, tuning findings, suppressing low-value alerts, and better prioritizing the most critical risks."
"For a first-time user who starts using Rapid7 InsightCloudSec, it is somewhat complicated to navigate through the UI and search for logs or vulnerabilities, so this is one aspect that could be improved."
"The login piece needs improvement."
 

Pricing and Cost Advice

"It is a 100% open-source solution needing just an Apache license. Also, there are no hidden fees to be paid."
"The solution is open-source and free."
"The Apache CloudStack is open source, so you do not have licenses to purchase."
"As far as I know, CS is still free of charge. If you want to pay some money, Citrix Cloud Platform is based on CS, I think. As for hypervisors – everything as usual, you need to pay for VMware and vCenter. As for XenServer, recently they changed the free feature list, so you may need to pay some money to get useful features like XenMotion."
"CloudStack is an open source solution, so you don't need to pay anything for it. When our company develops something specially for CloudStack, it is donated to the Apache Software Foundation and provided to anyone that wants to use it."
"CloudStack is an open-source product."
"​Give an effort to planning. If possible, contract a specialized consultant company for the initial setup and knowledge transfer.​​"
"There is no license, so the product is free unless you are buying professional technical support services."
"Companies generally buy this tool because the pricing is not that high."
"We're doing an annual subscription. There are additional expenses, but not within the confines of this platform."
report
Use our free recommendation engine to learn which Cloud Management solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
13%
Manufacturing Company
10%
Financial Services Firm
9%
Comms Service Provider
8%
Outsourcing Company
10%
Comms Service Provider
10%
Manufacturing Company
10%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise6
Large Enterprise12
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise8
 

Questions from the Community

What is your experience regarding pricing and costs for CloudStack?
CloudStack is open-source, so there is no cost apart from learning. Billing solutions, if outsourced, come at a moderate cost.
What needs improvement with CloudStack?
Enhancements for CloudStack can focus on integrating more hypervisors, as mentioned regarding current features. We're working on a new feature that will allow for certain limited functions, but ove...
What is your primary use case for CloudStack?
My usual use cases for CloudStack involve an AWS style private cloud or public cloud. I can deploy an AWS style cloud using the open source tool that is CloudStack. The use case depends on the cust...
What is your experience regarding pricing and costs for Rapid7 InsightCloudSec?
My experience with pricing, setup cost, and licensing for Rapid7 InsightCloudSec was really straightforward and easy, as the people from the company made it so easy. I had no problems with that.
What needs improvement with Rapid7 InsightCloudSec?
I think Rapid7 InsightCloudSec could be improved by inspecting other kinds of things, such as IaC or infrastructure as code. It could scan some kind of Terraform files, as we use a lot of Terraform...
What is your primary use case for Rapid7 InsightCloudSec?
My main use case for Rapid7 InsightCloudSec is to know the current security posture in our cloud environments and also detect possible vulnerabilities or misconfigurations. A quick, specific exampl...
 

Also Known As

Vmops, Cloud.com
DivvyCloud
 

Overview

 

Sample Customers

GreenQloud, Exoscale, TomTom, ASG, PC Extreme, ISWest, Grid'5000
Fannie Mae, 3M, PizzaHut, Spotify, Autodesk, Discovery
Find out what your peers are saying about CloudStack vs. Rapid7 InsightCloudSec and other solutions. Updated: November 2026.
920,769 professionals have used our research since 2012.