No more typing reviews! Try our Samantha, our new voice AI agent.

Digital Shadows vs Rapid7 InsightVM comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Digital Shadows
Average Rating
6.6
Reviews Sentiment
5.5
Number of Reviews
2
Ranking in other categories
Digital Risk Protection (7th)
Rapid7 InsightVM
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
66
Ranking in other categories
Vulnerability Management (12th), Risk-Based Vulnerability Management (4th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Digital Shadows is designed for Digital Risk Protection and holds a mindshare of 3.7%, down 5.9% compared to last year.
Rapid7 InsightVM, on the other hand, focuses on Risk-Based Vulnerability Management, holds 8.1% mindshare, down 14.1% since last year.
Digital Risk Protection Mindshare Distribution
ProductMindshare (%)
Digital Shadows3.7%
Recorded Future10.3%
ZeroFOX10.2%
Other75.8%
Digital Risk Protection
Risk-Based Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Rapid7 InsightVM8.1%
Qualys VMDR9.8%
Tenable Security Center7.6%
Other74.5%
Risk-Based Vulnerability Management
 

Featured Reviews

DavidJones7 - PeerSpot reviewer
Head of Content at Pharmaflow
Has required additional context for alerts but supports monitoring impersonation and threat activity effectively
I do not rate Digital Shadows a nine or ten because there are many things that need improvement. The information we get is kind of generic. For instance, for impersonation, we don't have much detail on their history, when it was used or how it was misused. Those further details would be really helpful, but the information we receive is basic, such as when it was last registered and when it was updated, without more insight about the malicious factors. For basic support from Digital Shadows, my impression is that it is six to seven because many times we see duplications or bugs, and the quality of the alerts is not up to the mark. We have escalated many times, but we do not receive solid responses from them in terms of fixes. Digital Shadows should focus on the engineering side rather than the support aspect because support is there to help us get updates, but in terms of quick fixes, it is not as responsive. The need for improvement lies more with the engineering part in fixing issues, which is linked to support.
reviewer2775840 - PeerSpot reviewer
Manager at a financial services firm with 5,001-10,000 employees
Manages vulnerabilities effectively over time but needs improvement in web coverage and dashboard flexibility
Most of the dynamic asset tagging we use is manual, not dynamic. To manage the assets, we employed the manual approach because we have a limitation regarding the license, so we don't use the dynamic approach much. I don't know how the configuration assessment has assisted with meeting compliance standards. The product that we use is the on-premise solution where we configure assets and dynamically scan them. However, we use the default policies more, the template, so Rapid7 InsightVM on-premise version is not that effective in the web-related systems. However, it is best on the OS to identify and discover the OS-related vulnerabilities, more of open ports and the discovery of vulnerable ports or services. It would be better to improve Rapid7 InsightVM by including or working better to add web-related templates because it's not that effective in regard to web. I don't know if they may have a separate product regarding the web, but for the on-premise type, they are not strong in this area. I would prefer to see web-related templates in addition to improving the dashboard-related things because the dashboard has been constant for a very long time. It would be better to see various kinds of, perhaps a flexible type of dashboard. If it's not customizable at all, I would want to see the risk and asset over time with more flexibility. The current dashboard is not flexible in this regard; I have to dig down every day, so they should work on this as well, in addition to the web.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Digital Shadows helps our organization identify and mitigate cyber threats through their crawling of the internet, gathering information, pivoting it, and then sending those alerts to us which we monitor from our SIEM tool."
"The most effective feature for threat intelligence, in my opinion, is collecting impersonating websites."
"This solution is much more user-friendly than past solutions I have used."
"most valuable features of Rapid7 InsightVM for me are creating dynamic asset tags, generating reports, and deploying the agent. The agent scans assets every four hours, providing real-time data on any devices. Although there weren't any significant new features compared to our previous tool, having both SIEM and vulnerability management handled by one tool made things easier. We could gather logs from different devices and cloud sources, and perform detailed investigations without switching tools. I haven't worked with the automation capabilities of InsightVM. For remediation prioritization, we check the vulnerability, search for solutions on open platforms, and work with different teams to apply patches after proper testing. Currently, we don’t have any AI or ASM projects assisted by InsightVM"
"The discovery and prioritization of vulnerabilities is a good feature along with the investigation, the trials function, and it's also user friendly."
"The feature that I have found most valuable is its dashboards."
"This solution's most useful feature is that it is entirely a single-page application."
"The reports in Rapid7 InsightVM are useful when compared to competitors."
"Using Rapid7, we can install a scan engine, we can do our VPN connections, and we can conduct internal scans of remote sites. We prefer the web application. It's smarter and more accurate from an application perspective."
"It is stable and scalable."
 

Cons

"For basic support from Digital Shadows, my impression is that it is six to seven because many times we see duplications or bugs, and the quality of the alerts is not up to the mark."
"The solution doesn't pick up all the brands of the URLs. I have a relatively small company name, however, the solution still misses a certain number of URLs with my company's name in it that are impersonating websites. It's not very comprehensive, to be honest."
"The solution doesn't pick up all the brands of the URLs."
"Rapid7 InsightVM, has impressive capabilities, especially when it comes to managing video equipment. However, we've noticed that Rapid7 also offers a cloud solution called CloudSec, and we don't have that. We think it would be better if InsightVM had all the features for both on-premise and cloud management."
"InsightVM could be improved by providing passive scanning as an option."
"The product's documentation could be enhanced with clearer and more detailed instructions."
"For the community edition one of the big issues is with the registration. Rapid 7 only supports paid domains for registration, so no .gmail.com, .yahoo.com domains."
"There was functionality present previously, however, currently, we can't integrate directly with Jira Service Desk - only the cloud version."
"This solution integrates with another module in Metasploit, that doesn't exist in the other solutions. It is subscribed to on our roadmap, but we chose to implement both Nexppose and AppSpider."
"The solution could improve by being more secure."
"Customer service needs significant improvement. There are delays in support response times, and support is not available promptly, especially when issues are escalated to another region."
 

Pricing and Cost Advice

Information not available
"In some cases, we procure the licenses. In some cases, the customers directly buy the license from Rapid7."
"Its pricing depends on the number of users per month."
"Our licensing costs are somewhere around $40,000 annually. There are no additional fees."
"InsightVM is an expensive product, especially compared to its competitors, at around a million NOK per year."
"The license is annual and this is the optimal approach when it comes to most software."
"The licensing is asset-based and very straightforward."
"Its price is too high. My only concern or issue with Rapid7 is its pricing."
"This solution is expensive, but it's fine for us as we have an open budget for security solutions. Protection and having the system secured is more important."
report
Use our free recommendation engine to learn which Digital Risk Protection solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
7%
Manufacturing Company
7%
Engineering Company
7%
Financial Services Firm
12%
Manufacturing Company
9%
Computer Software Company
7%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise14
Large Enterprise25
 

Questions from the Community

What is your experience regarding pricing and costs for Digital Shadows?
Regarding the cost of Digital Shadows, I think prices are a bit higher. The information provided is already available; some of it is paid information. However, considering all the information they ...
What needs improvement with Digital Shadows?
I do not rate Digital Shadows a nine or ten because there are many things that need improvement. The information we get is kind of generic. For instance, for impersonation, we don't have much detai...
What is your primary use case for Digital Shadows?
Our main use cases for Digital Shadows are mainly using it for threat intel. For instance, we have our domain listed on Digital Shadows. Whenever we see any sort of impersonation domain registratio...
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. You can easily prioritize vulnerabilities using attacker analytics. Overall, Rapid...
What is your experience regarding pricing and costs for Rapid7 InsightVM?
My experience with the pricing, setup cost, and licensing is that both the setup cost and licensing are great.
What needs improvement with Rapid7 InsightVM?
To improve Rapid7 InsightVM, I wish to have integration with patching systems, which would be useful to us. The usability of Rapid7 InsightVM is excellent, and the reporting module is one of the mo...
 

Also Known As

No data available
InsightVM, NeXpose
 

Overview

 

Sample Customers

Accenture, Pret A Manger, Human Rights Watch
ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
Find out what your peers are saying about Recorded Future, ZeroFOX, Proofpoint and others in Digital Risk Protection. Updated: May 2026.
900,747 professionals have used our research since 2012.