Try our new research platform with insights from 80,000+ expert users

Microsoft Defender for Cloud vs Rapid7 InsightVM comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Vulnerability Management (18th), Continuous Threat Exposure Management (CTEM) (3rd)
Microsoft Defender for Cloud
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
87
Ranking in other categories
Vulnerability Management (6th), Container Management (7th), Container Security (7th), Cloud Workload Protection Platforms (CWPP) (1st), Cloud Security Posture Management (CSPM) (4th), Cloud-Native Application Protection Platforms (CNAPP) (4th), Data Security Posture Management (DSPM) (5th), Microsoft Security Suite (7th), Compliance Management (4th), Cloud Detection and Response (CDR) (2nd)
Rapid7 InsightVM
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
66
Ranking in other categories
Risk-Based Vulnerability Management (4th)
 

Featured Reviews

Reviewer6233 - PeerSpot reviewer
Works at a healthcare company with 10,001+ employees
Has become an indispensable tool in our cybersecurity arsenal
While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even greater value. One key area for enhancement is the searching capabilities within its vulnerabilities module. By incorporating the ability to create Boolean searches, users would gain the ability to apply more complex filters and customize their search criteria. This would greatly enhance the precision and efficiency with which security teams can identify and prioritize vulnerabilities. Having such tailored search capabilities would save time and resources by narrowing down vast lists of vulnerabilities to those that meet specific parameters relevant to our unique risk environment. Additionally, integrating more robust reporting and visualization tools would be advantageous. Enhanced dashboards that offer customizable visual representations of risk configurations and threat landscapes would facilitate better communication with stakeholders, making it easier to explain vulnerabilities and the rationale behind certain security measures. This would also aid in demonstrating the improvements and value derived from existing security investments to leadership and non-technical team members.
David Birhange - PeerSpot reviewer
Director, Cloud and Modern Workplace at Informanix Technology Group
Brings together cloud security insights through a unified view and supports agentless protection for virtual machines
Copilot and similar features are already being used, though not necessarily for Microsoft Defender for Cloud specifically. We are trying to get more experience before rolling out most of Microsoft Defender for Cloud's AI capabilities. This is definitely on our to-do list, and the priority is urgent as we seek to learn more about these capabilities. The GenAI threat protection from Microsoft Defender for Cloud has not been enabled yet. There are many unknowns with AI applications. AI agents will operate while you're not present, whether you are sleeping or awake, and it's unclear whether there would be any exfiltration of data or how data is being managed. Microsoft Purview is being used extensively, and there is significant development going on with DSPM that will be rolled out to address security concerns. Data labeling and proper demarcation for sensitivity of data before it is received are being actively pursued.
FL
Senior Manager - Pre-Sales at Trillium Information Security Systems
Offers robust compliance features but needs improved automation in remediation
The automation capability remediation needs improvement. The current process requires manually telling IT teams to remediate vulnerabilities, and then they update the status of these vulnerabilities in the platform. This basic feature that Rapid7 calls an automated remediation process is actually manual. We can update the status of vulnerabilities in the Rapid7 InsightVM platform and collectively see how many vulnerabilities we have identified and how many are remediated by our IT team. More automation in the remediation feature is a basic demand from many customers. The remediation part and vulnerability identification of network devices or rigid devices are not currently supported by Rapid7 InsightVM. More integration and automation are the two areas Rapid7 needs to improve in their product.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We saw benefits from Zafran Security almost immediately after deploying it."
"With Zafran Security, it integrates with your security controls, allowing you to take that risk score and reduce it based on the controls in place or increase the risk based on different factors, such as if the issue is internet reachable or if there's an exploit in the wild."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"Zafran is an excellent tool."
"The solution is up-to-date with the latest updates and identified threats."
"The most valuable feature is the recommendations provided on how to improve security. It has made the cloud environment more secure, thanks to all the recommendations we can get."
"The entire Defender Suite is tightly coupled, integrated, and collaborative."
"There is no better tool found to protect workloads in Azure than Microsoft Defender for Cloud."
"Microsoft Defender for Cloud has helped us manage and secure our cloud environments, and having observability to vulnerabilities is important for us so that we can take actions against any threats."
"The most valuable features offer the latest threat detection and response capabilities."
"The most valuable features of this solution are the remote workforce capabilities and the general experience of the remote workforce."
"The most valuable feature is the recommendations provided on how to improve security."
"Using Rapid7, we can install a scan engine, we can do our VPN connections, and we can conduct internal scans of remote sites. We prefer the web application. It's smarter and more accurate from an application perspective."
"It is stable and scalable."
"Rapid7 InsightVM has given us a practical view of the vulnerabilities present in our organization."
"The risk score that they provide makes it easier to find out the biggest risks. It helped the security officers to understand where the biggest risks are so that they can act on them. They can instruct their IT teams to give them a higher priority and mitigate them."
"The pricing is reasonable."
"The solution is good because it has a lot of options."
"The stability of Rapid7 InsightVM is excellent."
"The feature that I have found most valuable is its dashboards."
 

Cons

"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"I would like to see more connectors and plugins with other platforms."
"Comparing Microsoft Defender for Cloud to other solutions on the market, Microsoft needs to push a little bit to improve it."
"Microsoft Graph needs improvement."
"With the new Copilot functionality available everywhere, it is challenging to pinpoint areas for improvement. If I put in a lot of thought, I might identify things, but right now, nothing significant pops into my mind, but there is always room for more transparency, especially in pricing."
"The pricing could be improved, as it is somewhat high for smaller companies."
"I would like to see better automation when it comes to pushing out security features to the recommendations, and better documentation on the step-by-step procedures for enabling certain features."
"An area where Microsoft Defender for Cloud could be improved is in getting away from having multiple menus that do the same thing, which seems imposing when looking at it."
"However, some Copilot features aren't available in the GCP environment. This is something we hope will be addressed in the future."
"The on-premise updates could improve from Rapid7 InsightVM."
"InsightVM could be improved by providing passive scanning as an option."
"Patch management is the only missing feature I can think of. Rapid7 detects vulnerabilities, but it should also help you manage patches."
"The authentication scan is not working."
"In terms of improvements, its price could be better. Our main issue with Rapid7 is that it is too expensive. You can only sell it to enterprise accounts. In terms of new features, Rapid7 came up with a product called InsightIDR a couple of years ago, which is a good SIEM solution. We expect that Rapid7 will work on some sort of integration between InsightVM and InsightIDR, where vulnerability or anomaly detected by InsightVM can be reported in InsightIDR in some sort of real-time. Rapid7 doesn't patch. For example, if you have a vulnerability, some products can scan and also do the patching, but Rapid7 does not do the patching. It would be nice if it can also patch."
"The reporting is a little bit tricky because it can be difficult to exactly pinpoint some of the assets to filter them and generate a report."
"They should improve the cybersecurity feature of the solution."
"This solution creates false-positives which can cause issues with reporting."
 

Pricing and Cost Advice

Information not available
"Understanding the costs of cloud services can be complicated at first. As with a lot of things in the cloud, it can be quite hard to understand the end cost, but it becomes clearer over time. Early on, the lack of transparency is a challenge. Microsoft does not tell you the cost when they launch something. It is clever marketing, and there is room for improvement there. There should be clarity from the start."
"Pricing depends on your workload size, but it is very cheap. If you're talking about virtual machines, it is $5 or something for each machine, which is minimal. If you go for some agent-based solution for every virtual machine, then you need to pay the same thing or more than that. For an on-premises solution like this, we were paying around $30 to $50 based on size. With Defender, Microsoft doesn't bother about the size. You pay based on the number of machines. So, if you have 10 virtual machines, and 10 virtual machines are being monitored, you are paying based on that rather than the size of the virtual machine. Thus, you are paying for the number of units rather than paying for the size of your units."
"It is bundled with our enterprise subscription, which makes it easy to go for it. It is available by default, and there is no extra cost for using the standard features."
"Although I am outside of the discussion on budget and costing, I can say that the importance of security provided by this solution is of such importance that whatever the cost is, it is not a factor."
"I rate Microsoft Defender a three out of ten for affordability. The price could be a little lower."
"Security Center charges $15 per resource for any workload that you onboard into it. They charge per VM or per data-base server or per application. It's not like Microsoft 365 licensing, where there are levels like E3 and E5. Security Center is pretty straightforward."
"The licensing cost per server is $15 per month."
"The tool is pretty expensive."
"Its pricing depends on the number of users per month."
"InsightVM is an expensive product, especially compared to its competitors, at around a million NOK per year."
"It is less expensive compared to other competitors."
"Its price is too high. My only concern or issue with Rapid7 is its pricing."
"Comparing the price with the value that we receive, I am not happy with it."
"The solution is a bit more reasonably priced than other products."
"Pricing is reasonable because we pay according to asset usage. We can define our assets and sites according to our preference."
"In some cases, we procure the licenses. In some cases, the customers directly buy the license from Rapid7."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
880,954 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
8%
Computer Software Company
8%
Outsourcing Company
6%
Financial Services Firm
13%
Computer Software Company
11%
Manufacturing Company
9%
Government
6%
Financial Services Firm
13%
Manufacturing Company
10%
Computer Software Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise10
Large Enterprise49
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise13
Large Enterprise25
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
How is Prisma Cloud vs Azure Security Center for security?
Azure Security Center is very easy to use, integrates well, and gives very good visibility on what is happening acros...
What is your experience regarding pricing and costs for Microsoft Defender for Cloud?
My experience with pricing, setup cost, and licensing for Microsoft Defender for Cloud was pretty straightforward. We...
What needs improvement with Microsoft Defender for Cloud?
Microsoft Defender for Cloud can be improved. An additional feature that should be included in the next release is Ze...
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. Yo...
What do you like most about Rapid7 InsightVM?
The product's initial setup phase was very easy.
What is your experience regarding pricing and costs for Rapid7 InsightVM?
The customers are mostly SMBs, though some enterprise organizations have also deployed the solution. This is neither ...
 

Also Known As

No data available
Microsoft Azure Security Center, Azure Security Center, Microsoft ASC, Azure Defender
InsightVM, NeXpose
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

Information Not Available
Microsoft Defender for Cloud is trusted by companies such as ASOS, Vatenfall, SWC Technology Partners, and more.
ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
Find out what your peers are saying about Wiz, Tenable, Qualys and others in Vulnerability Management. Updated: January 2026.
880,954 professionals have used our research since 2012.