No more typing reviews! Try our Samantha, our new voice AI agent.

Digital Shadows vs Rapid7 InsightVM comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Digital Shadows
Average Rating
6.6
Reviews Sentiment
5.5
Number of Reviews
2
Ranking in other categories
Digital Risk Protection (9th)
Rapid7 InsightVM
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
66
Ranking in other categories
Vulnerability Management (12th), Risk-Based Vulnerability Management (4th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Digital Shadows is designed for Digital Risk Protection and holds a mindshare of 3.5%, down 5.5% compared to last year.
Rapid7 InsightVM, on the other hand, focuses on Risk-Based Vulnerability Management, holds 7.2% mindshare, down 14.3% since last year.
Digital Risk Protection Mindshare Distribution
ProductMindshare (%)
Digital Shadows3.5%
ZeroFOX9.8%
Recorded Future9.6%
Other77.1%
Digital Risk Protection
Risk-Based Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Rapid7 InsightVM7.2%
Qualys VMDR9.7%
Tenable Security Center7.2%
Other75.9%
Risk-Based Vulnerability Management
 

Featured Reviews

DavidJones7 - PeerSpot reviewer
Head of Content at Pharmaflow
Has required additional context for alerts but supports monitoring impersonation and threat activity effectively
I do not rate Digital Shadows a nine or ten because there are many things that need improvement. The information we get is kind of generic. For instance, for impersonation, we don't have much detail on their history, when it was used or how it was misused. Those further details would be really helpful, but the information we receive is basic, such as when it was last registered and when it was updated, without more insight about the malicious factors. For basic support from Digital Shadows, my impression is that it is six to seven because many times we see duplications or bugs, and the quality of the alerts is not up to the mark. We have escalated many times, but we do not receive solid responses from them in terms of fixes. Digital Shadows should focus on the engineering side rather than the support aspect because support is there to help us get updates, but in terms of quick fixes, it is not as responsive. The need for improvement lies more with the engineering part in fixing issues, which is linked to support.
reviewer2775840 - PeerSpot reviewer
Manager at a financial services firm with 5,001-10,000 employees
Manages vulnerabilities effectively over time but needs improvement in web coverage and dashboard flexibility
Most of the dynamic asset tagging we use is manual, not dynamic. To manage the assets, we employed the manual approach because we have a limitation regarding the license, so we don't use the dynamic approach much. I don't know how the configuration assessment has assisted with meeting compliance standards. The product that we use is the on-premise solution where we configure assets and dynamically scan them. However, we use the default policies more, the template, so Rapid7 InsightVM on-premise version is not that effective in the web-related systems. However, it is best on the OS to identify and discover the OS-related vulnerabilities, more of open ports and the discovery of vulnerable ports or services. It would be better to improve Rapid7 InsightVM by including or working better to add web-related templates because it's not that effective in regard to web. I don't know if they may have a separate product regarding the web, but for the on-premise type, they are not strong in this area. I would prefer to see web-related templates in addition to improving the dashboard-related things because the dashboard has been constant for a very long time. It would be better to see various kinds of, perhaps a flexible type of dashboard. If it's not customizable at all, I would want to see the risk and asset over time with more flexibility. The current dashboard is not flexible in this regard; I have to dig down every day, so they should work on this as well, in addition to the web.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Digital Shadows helps our organization identify and mitigate cyber threats through their crawling of the internet, gathering information, pivoting it, and then sending those alerts to us which we monitor from our SIEM tool."
"The most effective feature for threat intelligence, in my opinion, is collecting impersonating websites."
"The pricing is reasonable."
"It is a stable solution."
"This solution's most useful feature is that it is entirely a single-page application."
"The solution works well."
"When it comes to the process, installation is very easy and does not take long."
"The most valuable feature is the site scanning, where we can provide a complete subnet and what it is we need to scan on those devices."
"It is stable and scalable."
"This solution is much more user-friendly than past solutions I have used."
 

Cons

"The solution doesn't pick up all the brands of the URLs. I have a relatively small company name, however, the solution still misses a certain number of URLs with my company's name in it that are impersonating websites. It's not very comprehensive, to be honest."
"For basic support from Digital Shadows, my impression is that it is six to seven because many times we see duplications or bugs, and the quality of the alerts is not up to the mark."
"The solution doesn't pick up all the brands of the URLs."
"In terms of improvements, its price could be better. Our main issue with Rapid7 is that it is too expensive. You can only sell it to enterprise accounts. In terms of new features, Rapid7 came up with a product called InsightIDR a couple of years ago, which is a good SIEM solution. We expect that Rapid7 will work on some sort of integration between InsightVM and InsightIDR, where vulnerability or anomaly detected by InsightVM can be reported in InsightIDR in some sort of real-time. Rapid7 doesn't patch. For example, if you have a vulnerability, some products can scan and also do the patching, but Rapid7 does not do the patching. It would be nice if it can also patch."
"The solution should include a tighter integration with third-party threat modeling and threat intelligence tools."
"The team needs to improve the speed and focus on the new bandwidth feed. Sometimes, it takes a while to scan, especially with new updates."
"There is room for improvement on its cloud side. In the next release I would like to see better reporting."
"There are certain limitations because of the product being used on a hybrid model. Rapid7 InsightVM doesn't offer a solution purely in the cloud."
"The on-premise updates could improve from Rapid7 InsightVM."
"There are end-user needs and expectations that are being overlooked in the development that could be addressed by appointing a customer advisory board."
"The reporting could be better."
 

Pricing and Cost Advice

Information not available
"Comparing the price with the value that we receive, I am not happy with it."
"Our licensing costs are somewhere around $40,000 annually. There are no additional fees."
"We purchase annual licenses."
"Its price is too high. My only concern or issue with Rapid7 is its pricing."
"The price of the solution is less than the competitors."
"The license is IP based. How many IPs you are using to scan is the amount of the license you have to buy. The number of users doesn't matter; many users can use it or only person. It depends on the culture of the organization."
"This solution is expensive, but it's fine for us as we have an open budget for security solutions. Protection and having the system secured is more important."
"Pricing is reasonable because we pay according to asset usage. We can define our assets and sites according to our preference."
report
Use our free recommendation engine to learn which Digital Risk Protection solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Engineering Company
7%
Computer Software Company
6%
Outsourcing Company
6%
Financial Services Firm
12%
Manufacturing Company
8%
Computer Software Company
7%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise14
Large Enterprise25
 

Questions from the Community

What is your experience regarding pricing and costs for Digital Shadows?
Regarding the cost of Digital Shadows, I think prices are a bit higher. The information provided is already available; some of it is paid information. However, considering all the information they ...
What needs improvement with Digital Shadows?
I do not rate Digital Shadows a nine or ten because there are many things that need improvement. The information we get is kind of generic. For instance, for impersonation, we don't have much detai...
What is your primary use case for Digital Shadows?
Our main use cases for Digital Shadows are mainly using it for threat intel. For instance, we have our domain listed on Digital Shadows. Whenever we see any sort of impersonation domain registratio...
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. You can easily prioritize vulnerabilities using attacker analytics. Overall, Rapid...
What is your experience regarding pricing and costs for Rapid7 InsightVM?
My experience with the pricing, setup cost, and licensing is that both the setup cost and licensing are great.
What needs improvement with Rapid7 InsightVM?
To improve Rapid7 InsightVM, I wish to have integration with patching systems, which would be useful to us. The usability of Rapid7 InsightVM is excellent, and the reporting module is one of the mo...
 

Also Known As

No data available
InsightVM, NeXpose
 

Overview

 

Sample Customers

Accenture, Pret A Manger, Human Rights Watch
ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
Find out what your peers are saying about Recorded Future, ZeroFOX, Proofpoint and others in Digital Risk Protection. Updated: August 2026.
908,834 professionals have used our research since 2012.