NAVEX One vs Rapid7 InsightVM comparison

Why PeerSpot?

The compared NAVEX and Rapid7 solutions aren't in the same category. NAVEX is ranked #25 in G , and holds a 1.5% mindshare in the category. Rapid7 is ranked #4 in RBVM , with an average rating of 7.7, and holds a 6.6% mindshare. Additionally, 100% of NAVEX users are willing to recommend the solution, compared to 87% of Rapid7 users who would recommend it.

NAVEX One

Read 1 NAVEX One review

2,610 Views
1,749 Comparison Views

100% willing to recommend

Rapid7 InsightVM

Read 66 Rapid7 InsightVM reviews

9,458 Views
4,351 Comparison Views

87% willing to recommend

NAVEX One

Rapid7 InsightVM

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between NAVEX One and Rapid7 InsightVM based on real PeerSpot user reviews.

Find out what your peers are saying about RSA, MetricStream, Diligent and others in GRC.

To learn more, read our detailed GRC Report (Updated: September 2026).

Buyer's Guide

GRC

September 2026

Download the complete report

Helped 913,806 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

NAVEX One

Average Rating

7.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

GRC (25th), IT Governance (14th), IT Vendor Risk Management (12th)

Rapid7 InsightVM

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Vulnerability Management (13th), Risk-Based Vulnerability Management (4th)

Mindshare comparison

While both are Security Software solutions, they serve different purposes. NAVEX One is designed for GRC and holds a mindshare of 1.5%, up 1.2% compared to last year.
Rapid7 InsightVM, on the other hand, focuses on Risk-Based Vulnerability Management, holds 6.6% mindshare, down 13.6% since last year.

GRC Mindshare Distribution
Product	Mindshare (%)
NAVEX One	1.5%
RSA Archer	5.9%
MetricStream	3.0%
Other	89.6%

GRC

Risk-Based Vulnerability Management Mindshare Distribution
Product	Mindshare (%)
Rapid7 InsightVM	6.6%
Qualys Exposure Management	9.7%
Tenable Security Center	6.9%
Other	76.80000000000001%

Risk-Based Vulnerability Management

Featured Reviews

Eric Vollman

Information Security Business Enablement Mgr. at a insurance company with 5,001-10,000 employees

Useful for risk assessment and has customization capability

The tool helps us with security incidents, policies, business continuity, disaster recovery, and internal audits. The feature I like the most is its customization capability. It acts like a blank canvas where you can construct forms and workflows according to your needs. You can configure and customize a lot yourself, whether starting from scratch or using some out-of-the-box options. The solution has impacted our operations by helping us manage and prioritize environmental risks. It also assists in establishing ownership of risks and enables us to mitigate or mediate existing risks. Additionally, it facilitates tracking risks throughout their entire lifecycle.

Read full review

reviewer2775840

Manager at a financial services firm with 5,001-10,000 employees

Manages vulnerabilities effectively over time but needs improvement in web coverage and dashboard flexibility

Most of the dynamic asset tagging we use is manual, not dynamic. To manage the assets, we employed the manual approach because we have a limitation regarding the license, so we don't use the dynamic approach much. I don't know how the configuration assessment has assisted with meeting compliance standards. The product that we use is the on-premise solution where we configure assets and dynamically scan them. However, we use the default policies more, the template, so Rapid7 InsightVM on-premise version is not that effective in the web-related systems. However, it is best on the OS to identify and discover the OS-related vulnerabilities, more of open ports and the discovery of vulnerable ports or services. It would be better to improve Rapid7 InsightVM by including or working better to add web-related templates because it's not that effective in regard to web. I don't know if they may have a separate product regarding the web, but for the on-premise type, they are not strong in this area. I would prefer to see web-related templates in addition to improving the dashboard-related things because the dashboard has been constant for a very long time. It would be better to see various kinds of, perhaps a flexible type of dashboard. If it's not customizable at all, I would want to see the risk and asset over time with more flexibility. The current dashboard is not flexible in this regard; I have to dig down every day, so they should work on this as well, in addition to the web.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The tool helps us with security incidents, policies, business continuity, disaster recovery, and internal audits. The feature I like the most is its customization capability. It acts like a blank canvas where you can construct forms and workflows according to your needs. You can configure and customize a lot yourself, whether starting from scratch or using some out-of-the-box options."

"The solution protects us from vulnerabilities, tells us about them, ranks them as critical or high risk, and allows us to take action immediately to protect our company from attacks."

"Using Rapid7, we can install a scan engine, we can do our VPN connections, and we can conduct internal scans of remote sites. We prefer the web application. It's smarter and more accurate from an application perspective."

"When you connect any new device to the network, Rapid7 has the ability to detect the new device immediately."

"Rapid 7 has positively impacted my organization by reducing the risk to the environment, specifically by reducing the number of vulnerabilities and the number of vulnerable hosts."

"The product's initial setup phase was very easy."

"The solution's user interface is good and has some vulnerability prioritization."

"most valuable features of Rapid7 InsightVM for me are creating dynamic asset tags, generating reports, and deploying the agent. The agent scans assets every four hours, providing real-time data on any devices. Although there weren't any significant new features compared to our previous tool, having both SIEM and vulnerability management handled by one tool made things easier. We could gather logs from different devices and cloud sources, and perform detailed investigations without switching tools. I haven't worked with the automation capabilities of InsightVM. For remediation prioritization, we check the vulnerability, search for solutions on open platforms, and work with different teams to apply patches after proper testing. Currently, we don’t have any AI or ASM projects assisted by InsightVM"

"The price is cheaper than other products on the market."

More Rapid7 InsightVM pros

Cons

"We think there's room for improvement, especially with customizing NAVEX One. Their development on the roadmap can be slow."

"I think the improvement in the tool should be to provide a better update to users because sometimes the information within the cloud and the scanner are not synchronized very fast."

"There needs to be much clearer instructions surrounding scanning."

"The team needs to improve the speed and focus on the new bandwidth feed. Sometimes, it takes a while to scan, especially with new updates."

"It would be great to have a mobile application client."

"There is an annual license fee which is pretty expensive because it's price per aspect. The pricing could definitely be cheaper."

"Rapid7 could be easier to manage. When you compare it to other similar solutions, it is a bit difficult to manage."

"There are end-user needs and expectations that are being overlooked in the development that could be addressed by appointing a customer advisory board."

"We'd like the agent to cover more compliance issues."

More Rapid7 InsightVM cons

Pricing and Cost Advice

"NAVEX One's pricing comes in the middle range when compared to other products."

"InsightVM is an expensive product, especially compared to its competitors, at around a million NOK per year."

"We purchase annual licenses."

"Comparing the price with the value that we receive, I am not happy with it."

"The price of the solution is less than the competitors."

"The solution is a bit more reasonably priced than other products."

"It is less expensive compared to other competitors."

"Pricing is reasonable because we pay according to asset usage. We can define our assets and sites according to our preference."

"A full license for the solution is expensive because it is at the organizational level and not by individual users."

More Rapid7 InsightVM pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which GRC solutions are best for your needs.

See recommendations

913,806 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Outsourcing Company

14%

Construction Company

Educational Organization

Financial Services Firm

11%

Manufacturing Company

Comms Service Provider

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	29
Midsize Enterprise	14
Large Enterprise	25

Questions from the Community

Ask a question

Earn 20 points

How would you choose between Rapid7 InsightVM and Tenable Nessus?

You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. You can easily prioritize vulnerabilities using attacker analytics. Overall, Rapid...

See all answers

What is your experience regarding pricing and costs for Rapid7 InsightVM?

My experience with the pricing, setup cost, and licensing is that both the setup cost and licensing are great.

See all answers

What needs improvement with Rapid7 InsightVM?

To improve Rapid7 InsightVM, I wish to have integration with patching systems, which would be useful to us. The usability of Rapid7 InsightVM is excellent, and the reporting module is one of the mo...

See all answers

Comparisons

Mitratech Prevalent vs NAVEX One

Compared 23% of the time

RSA Archer vs NAVEX One

Compared 11% of the time

MetricStream vs NAVEX One

Compared 9% of the time

Optiv GRC vs NAVEX One

Compared 8% of the time

Amazon Inspector vs NAVEX One

Compared 2% of the time

More NAVEX One Competitors

Qualys Exposure Management vs Rapid7 InsightVM

Compared 12% of the time

Tenable Nessus vs Rapid7 InsightVM

Compared 10% of the time

Tenable Security Center vs Rapid7 InsightVM

Compared 9% of the time

IBM Guardium Vulnerability Assessment vs Rapid7 InsightVM

Compared 4% of the time

Arctic Wolf Managed Risk vs Rapid7 InsightVM

Compared 4% of the time

More Rapid7 InsightVM Competitors

Product Reports

Buyer's Guide

GRC

September 2026

Download NAVEX One product report

Buyer's Guide

Rapid7 InsightVM

September 2026

Download Rapid7 InsightVM product report

Also Known As

Lockpath Keylight

InsightVM, NeXpose

Overview

NAVEX One is a comprehensive compliance management platform designed to address corporate governance, risk management, and compliance (GRC) needs efficiently.

It provides a centralized environment for organizations to streamline processes, mitigate risks, and maintain regulatory compliance. With tools that simplify workflows, NAVEX One enhances transparency and eases the burden of compliance management. Its versatility makes it suitable for a wide range of industries, enabling businesses to optimize their GRC strategies effectively.

What are the key features of NAVEX One?

Policy Management: Streamline the creation, distribution, and management of company policies.
Incident Management: Track and address compliance issues with efficient incident reporting and investigation tools.
Risk Management: Identify, assess, and mitigate risks using advanced analytics and reporting.
Training & Awareness: Conduct employee training for compliance awareness and ensure regulatory readiness.
Third-Party Risk Management: Monitor and evaluate third-party relationships to reduce associated risks.

What benefits and ROI can you expect from NAVEX One?

Improved Compliance: Enhanced compliance posture through a centralized platform.
Risk Reduction: Proactively identify and manage risks, reducing potential liabilities.
Operational Efficiency: Streamline processes, leading to reduced administrative overheads.
Cost Savings: Mitigate fines and avoid costly regulatory penalties.
Enhanced Reporting: Gain insights through comprehensive reporting tools, leading to data-driven decisions.

Industries such as finance, healthcare, and manufacturing have successfully implemented NAVEX One to cater to sector-specific compliance needs. Its adaptable framework allows for tailored deployment strategies, ensuring that each industry can leverage its full potential in addressing their GRC requirements.

NAVEX

Rapid7 InsightVM provides advanced vulnerability scanning and remediation tracking with real-time data integration. Its intuitive interface supports both agent and agentless modes, enhancing cybersecurity by reducing exploitable vulnerabilities.

Rapid7 InsightVM integrates smoothly with existing security infrastructure, supporting detailed dashboards and reporting features for efficient risk scoring and vulnerability management. Users value its comprehensive asset tagging and the ability to prioritize vulnerabilities, appreciating host discovery capabilities. While InsightVM requires enhancements in reporting flexibility and patch management integration, and users seek improved support response times and extended security measures. Desired improvements also include greater integration with other tools and expanded dashboard customization.

What are the key features of Rapid7 InsightVM?

Vulnerability Scanning: Delivers detailed assessments of network vulnerabilities.
Risk Scoring: Provides efficient risk prioritization guided by detailed analytics.
Dashboards: Offers customizable, comprehensive metrics for insightful reporting.
Asset Tagging: Supports efficient asset management with intuitive tagging capabilities.
Host Discovery: Features robust host discovery for enhanced security coverage.

What benefits should reviews highlight?

Real-Time Data: Enables timely and accurate vulnerability management.
Intuitive Interface: Facilitates easier user interaction and quick access to vital functions.
Integration Capabilities: Seamlessly works with existing systems for enhanced security.
False Positives Reduction: Improves accuracy, minimizing reporting errors.
Comprehensive Insight: Provides valuable insights that aid in prioritization and remediation.

InsightVM's implementation spans several industries, offering robust solutions in vulnerability management, patch management, and cybersecurity compliance facilitation. Organizations leverage its capacity for comprehensive network monitoring and critical vulnerability visibility to enhance their cybersecurity posture.

Rapid7

Sample Customers

Claims Recovery Financial Services (CRFS), Surescript, The University of Chicago

ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM

Find out what your peers are saying about RSA, MetricStream, Diligent and others in GRC. Updated: September 2026.

DOWNLOAD NOW

913,806 professionals have used our research since 2012.

We monitor all GRC reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.