IT Central Station is now PeerSpot: Here's why

Kenna.VM vs Rapid7 InsightVM comparison

Cancel
You must select at least 2 products to compare!
Kenna Security Logo
1,136 views|934 comparisons
Rapid7 Logo
14,353 views|10,504 comparisons
Featured Review
Buyer's Guide
Vulnerability Management
July 2022
Find out what your peers are saying about Tenable Network Security, Qualys, Morphisec and others in Vulnerability Management. Updated: July 2022.
619,967 professionals have used our research since 2012.
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The risk context of any vulnerability is a valuable feature."

More Kenna.VM Pros →

"The main functionality of identifying item endpoints that weren't properly patched or had vulnerabilities is the solution's most valuable feature.""It's a relevant management tool.""I really love the new platform. It is really easy to understand, use, and deploy.""The assessment is most valuable.""When it comes to the process, installation is very easy and does not take long.""One of the most valuable features is it's graphical dashboard feature. It is quite easy to manage the widgets, and we can customize those according to our queries.""It's very scalable.""The solution is good because it has a lot of options."

More Rapid7 InsightVM Pros →

Cons
"An improvement would be some sort of an integration with any GRC suite."

More Kenna.VM Cons →

"The product does not have the capability to do dynamic scanning of non-web applications.""Reporting could be expanded.""InsightVM could be improved by providing passive scanning as an option.""Some of our customers want to be completely cloud based, and Rapid7 doesn't offer this as an option.""The integration with other solutions like JIRA could be better. Perhaps there could be some additional updates in the next phase that could integrate with it, so then you can proceed with the VT much easier.""It would be great to have a mobile application client. Currently, you have to use a mobile web browser on a device, but it is not similar to the desktop web browser in terms of user experience. It would be nice to have a mobile application to access the platform.""All products have room for increased security and Rapid7 InsightVM is no exception.""We found that after you passed an endpoint, it didn't always reflect it in the next scan. I'm not sure if it was a glitch or some issue with the product's software. That was never clear. That was always an issue and something that definitely needed improvement."

More Rapid7 InsightVM Cons →

Pricing and Cost Advice
  • "I think the pricing is based on the number of endpoints, so it's more subscription-based."
  • More Kenna.VM Pricing and Cost Advice →

  • "The licensing is asset-based and very straightforward."
  • "Its price is too high. My only concern or issue with Rapid7 is its pricing."
  • "Comparing the price with the value that we receive, I am not happy with it."
  • "The license is annual and this is the optimal approach when it comes to most software."
  • "In some cases, we procure the licenses. In some cases, the customers directly buy the license from Rapid7."
  • "Licensing fees are paid on a yearly basis."
  • "We have an annual license to use Rapid7 InsightVM and if we want to extend it, we will possibly choose more than one year."
  • "Pricing is reasonable because we pay according to asset usage. We can define our assets and sites according to our preference."
  • More Rapid7 InsightVM Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
    619,967 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The risk context of any vulnerability is a valuable feature.
    Top Answer:I think the pricing is based on the number of endpoints, so it's more subscription-based. If you have 10 computers versus a million computers, obviously the pricing will change.
    Top Answer:An improvement would be some sort of an integration with any GRC suite. There are a lot of GRC suites available, like Archer, MetricStream, Rsam, Protiviti, for example. So how would a solution like… more »
    Top Answer:You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. You can easily prioritize vulnerabilities using attacker analytics. Overall, Rapid7… more »
    Top Answer:InsightVM's most valuable feature is risk scoring, a formula based on different vectors like the ease of exploitation and the availability of the machine.
    Top Answer:InsightVM's licensing starts at a minimum of 128 IPs and can scale up to over 1,000.
    Ranking
    15th
    Views
    1,136
    Comparisons
    934
    Reviews
    1
    Average Words per Review
    498
    Rating
    8.0
    5th
    Views
    14,353
    Comparisons
    10,504
    Reviews
    18
    Average Words per Review
    477
    Rating
    7.4
    Comparisons
    Also Known As
    Kenna Security, Kenna, Kenna Security Platform
    InsightVM, NeXpose
    Learn More
    Overview

    Prioritize remediation based on empirically calculated risk metrics, and get continuous reports on your risk posture and security team performance.

    Rapid7 InsightVM is a comprehensive vulnerability management platform that protects your systems from attackers and is easy to scale. The solution provides easy access to vulnerability management, application security, detection and response, external threat intelligence, orchestration and automation, and more. Rapid7 InsightVM is ideal for security, IT, and DevOps teams, helping them reduce risk by enabling them to detect and respond to attacks quickly.

    Rapid7 InsightVM Features

    Rapid7 InsightVM has many valuable key features. Some of the most useful ones include:

    • Automated containment: With this feature, you can decrease exposure from vulnerabilities by automatically implementing temporary (or permanent) compensating controls via your network access control (NAC) systems, firewalls, and endpoint detection and response tools.
    • Policy assessment: Rapid7 InsightVM offers pre-built scan templates for common compliance requirements. The solution helps you take clear, actionable steps to compliance once you have assessed your risk posture. In addition, Rapid7 InsightVM’s Custom Policy Builder allows you to modify existing benchmarks or create new policies from scratch.
    • REST API: Rapid7 InsightVM REST API is easy to use and was built to easily automate virtually any aspect of vulnerability management, from data collection to risk analysis.
    • Live dashboards: Rapid7 InsightVM includes dashboards that are live and interactive by nature. The live dashboards enable you to create custom cards and full dashboards for anyone in your organization and allow you to track progress of your security program.
    • Automation-assisted patching: Rapid7 InsightVM’s automation-assisted patching gives you the autonomy to make key decisions in your patching process, such as your approval to apply certain patches to certain vulnerabilities.
    • Real risk prioritization: Rapid7 InsightVM makes it simple to know which vulnerabilities need to be prioritized and where your riskiest assets lie.
    • Goals and SLA’s: This feature enables you to make and track progress toward your goals and service level agreements (SLAs) at an appropriate pace.

    Rapid7 InsightVM Benefits

    There are many benefits to implementing Rapid7 InsightVM. Some of the biggest advantages the solution offers include:

    • Attack surface monitoring for maintained visibility: By leveraging attack surface monitoring with Project Sonar (a Rapid7 research project that regularly scans the internet to gain insights into global exposure to common vulnerabilities), you can gain more control of all of your external-facing assets, both known and unknown.
    • Container security: Rapid7 InsightVM integrates with your CI/CD tools, public container repositories, and private repositories to assess container images for vulnerabilities during the build process even before they are deployed.
    • Lightweight endpoint agent: Rapid7 InsightVM unifies data so you only need to install a single agent for continuous vulnerability assessment, incident detection, and log data collection.
    • Easily assign and track remediation duties: Using Rapid7 InsightVM, IT and security teams can assign as well as track remediation duties without having to deal with remediation reports, complex spreadsheets, or back-and-forth email tags.
    • Integration with cloud services and virtual infrastructure: Rapid7 InsightVM provides full visibility into risk across your physical, virtual, and cloud infrastructure.
    • Integrated threat feeds: Rapid7 InsightVM is designed with integrated threat feeds, giving you a dynamic view that shows you which threats are most relevant to your environment, enabling you to better protect against current, impending threats so you can react quickly to critical vulnerabilities.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by PeerSpot users currently using the Rapid7 InsightVM solution.

    An owner at a tech services company says, "I liked the dashboard on it. I could customize my dashboard with different widgets and different heat maps."

    PeerSpot user Kimeang S., Technical Consultant at Yip Intsoi, mentions, "The most important aspect of the solution is that it rarely gives false positives, especially compared to other products. It provides very clear reports for our IT teams to look at."

    A Director of Information Technology at a government explains, "The main functionality of identifying item endpoints that weren't properly patched or had vulnerabilities is the solution's most valuable feature."

    Offer
    Learn more about Kenna.VM
    Learn more about Rapid7 InsightVM
    Sample Customers
    TransUnion
    ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
    Top Industries
    VISITORS READING REVIEWS
    Computer Software Company23%
    Comms Service Provider18%
    Financial Services Firm14%
    Insurance Company5%
    REVIEWERS
    Financial Services Firm16%
    Computer Software Company16%
    Insurance Company11%
    Comms Service Provider11%
    VISITORS READING REVIEWS
    Computer Software Company22%
    Comms Service Provider17%
    Insurance Company7%
    Government7%
    Company Size
    VISITORS READING REVIEWS
    Small Business15%
    Midsize Enterprise15%
    Large Enterprise69%
    REVIEWERS
    Small Business39%
    Midsize Enterprise22%
    Large Enterprise39%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise17%
    Large Enterprise61%
    Buyer's Guide
    Vulnerability Management
    July 2022
    Find out what your peers are saying about Tenable Network Security, Qualys, Morphisec and others in Vulnerability Management. Updated: July 2022.
    619,967 professionals have used our research since 2012.

    Kenna.VM is ranked 15th in Vulnerability Management with 1 review while Rapid7 InsightVM is ranked 5th in Vulnerability Management with 23 reviews. Kenna.VM is rated 8.0, while Rapid7 InsightVM is rated 7.4. The top reviewer of Kenna.VM writes "Offers contextual prioritization and risk-based remediation of vulnerability". On the other hand, the top reviewer of Rapid7 InsightVM writes "Broad capabilities make this scanning solution able to cover a lot of ground". Kenna.VM is most compared with Tenable Nessus, Qualys VM, Balbix BreachControl, Snyk and RiskSense, whereas Rapid7 InsightVM is most compared with Tenable Nessus, Qualys VM, Tenable SC, Tenable.io Vulnerability Management and Cynet.

    See our list of best Vulnerability Management vendors.

    We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.