PortSwigger Burp Suite Enterprise Edition vs Rapid7 InsightVM comparison

PortSwigger Burp Suite Enterprise Edition vs. Rapid7 InsightVM

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of August 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.2%, up from 1.0% compared to the previous year. The mindshare of PortSwigger Burp Suite Enterprise Edition is 1.1%, up from 0.9% compared to the previous year. The mindshare of Rapid7 InsightVM is 1.9%, down from 4.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management Mindshare Distribution
Product	Mindshare (%)
Qualys TotalCloud	1.2%
Rapid7 InsightVM	1.9%
PortSwigger Burp Suite Enterprise Edition	1.1%
Other	95.8%

Vulnerability Management

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Read full review

Oussama Ben Taher

Studiant at Edifixio

Enables time-saving automated scanning and brute force attacks

The most appreciated functionality of PortSwigger Burp Suite is its ability to perform brute force attacks automatically. Its automated scanning feature saves time. Additionally, using this tool provides significant security insights, making our testing process more efficient and comprehensive, leading to considerable time savings, which in turn translates to financial benefits.

Read full review

reviewer2775840

Manager at a financial services firm with 5,001-10,000 employees

Manages vulnerabilities effectively over time but needs improvement in web coverage and dashboard flexibility

Most of the dynamic asset tagging we use is manual, not dynamic. To manage the assets, we employed the manual approach because we have a limitation regarding the license, so we don't use the dynamic approach much. I don't know how the configuration assessment has assisted with meeting compliance standards. The product that we use is the on-premise solution where we configure assets and dynamically scan them. However, we use the default policies more, the template, so Rapid7 InsightVM on-premise version is not that effective in the web-related systems. However, it is best on the OS to identify and discover the OS-related vulnerabilities, more of open ports and the discovery of vulnerable ports or services. It would be better to improve Rapid7 InsightVM by including or working better to add web-related templates because it's not that effective in regard to web. I don't know if they may have a separate product regarding the web, but for the on-premise type, they are not strong in this area. I would prefer to see web-related templates in addition to improving the dashboard-related things because the dashboard has been constant for a very long time. It would be better to see various kinds of, perhaps a flexible type of dashboard. If it's not customizable at all, I would want to see the risk and asset over time with more flexibility. The current dashboard is not flexible in this regard; I have to dig down every day, so they should work on this as well, in addition to the web.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I appreciate Qualys TotalCloud's ability to onboard any type of device with ease, including containers."

"CSPM is currently the most used feature, and we are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs."

"With TotalCloud, we can scan through the API. If we are not able to deploy cloud agents on the machine, we can use the API."

"Generally, Qualys is very good at detections, whether on cloud or on-prem, and the agent allows deployment on both infrastructures, providing continuous monitoring of your assets, which is a key selling point for us."

"I depend heavily on the reports that I have from this tool."

"TruRisk Insights is the most important innovation they've released this year."

"I appreciate TotalCloud's real-time protection and remediation features. The remediation options include automated one-click remedies and custom changes that help manage vulnerabilities efficiently."

"Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution."

More Qualys TotalCloud pros

"The most valuable part of it was probably the ability to intercept and modify calls."

"The product's initial setup phase was super easy."

"Parallel scans can be done with PortSwigger Burp Suite Enterprise Edition."

"This tool helps identify vulnerabilities. We then provide the report to the developers, who address the issues identified automatically. Its most valuable feature is CI/CD integration."

"The most appreciated functionality of PortSwigger Burp Suite is its ability to perform brute force attacks automatically."

"I like normal dynamic scanning, general web applications scanning, and vulnerability assessments."

"The solution's extensions really expand the capabilities and features offered by the installation."

"The most valuable features of PortSwigger Burp Suite Enterprise Edition are the vast amount of options and ease of use. They frequently improve the solution every six months to a year. Additionally, if we want any more features we can upload a custom script to meet our needs."

More PortSwigger Burp Suite Enterprise Edition pros

"The most important aspect of the solution is that it rarely gives false positives, especially compared to other products. It provides very clear reports for our IT teams to look at."

"The ease of deployment and configuration allows users to onboard quickly."

"InsightVM offers a robust platform for identifying, prioritizing, and addressing vulnerabilities across an organization's IT infrastructure."

"InsightVM allows customers to manage assets from anywhere, whether they need the ICS compiler or users to work from home."

"The solution is good because it has a lot of options."

"The risk score that they provide makes it easier to find out the biggest risks. It helped the security officers to understand where the biggest risks are so that they can act on them. They can instruct their IT teams to give them a higher priority and mitigate them."

"The solution protects us from vulnerabilities, tells us about them, ranks them as critical or high risk, and allows us to take action immediately to protect our company from attacks."

"Insight VM vs Tenable Nessus is a more user-friendly product."

More Rapid7 InsightVM pros

Cons

"Two areas for improvement in Qualys TotalCloud are the speed of the public cloud platform and vulnerability detection."

"TotalCloud could improve the classification of vulnerabilities. Specifically, it could enhance the categorization of what aspects fall under patches resolved by OS or software updates and what pertains to configuration adjustments."

"We would like to see Windows-based sensors available in Qualys, as this would make the platform more versatile and support a broader range of environments."

"Regarding improvements to Qualys TotalCloud, I suggest that user navigation can be enhanced because initially, many users found it complicated and had trouble understanding the platform due to information being spread across multiple tabs."

"Qualys TotalCloud's increasing complexity, due to the development and deployment of multiple solutions, is making the GUI difficult to navigate."

"In a future release, I suggest that zero-day vulnerabilities should be predicted in advance using AI technologies. The system is not 100% secure yet, so proactive threat hunting could be enhanced to be more proactive than the current system."

"The onboarding process is a bit difficult. In the initial phase, it is very difficult to understand the features, what the dashboard contains, and what criteria they are using."

"Qualys TotalCloud needs to enhance its scanning capabilities in the IP domain, as it currently lacks the functionality to resolve IPs to their corresponding domain names."

More Qualys TotalCloud cons

"From my personal experience, the solution's performance could be improved."

"There's definitely room for improvement. There are lots of false positives. Once I do the manual assessment, it comes as a false positive. They need to improve the Enterprise Edition, especially the part that gives false positives."

"It would be beneficial if Burp Suite provided predefined payloads for each attack category, such as SQL injection and cross-site scripting, to automate some tasks more effectively."

"Scalability could be better."

"The implementation of the solution is quite complicated and could be easier."

"It would be better if the solution is cloud-based."

"The product needs to have the ability to evaluate more."

"The solution is a bit expensive."

More PortSwigger Burp Suite Enterprise Edition cons

"We are a registered reseller and a trusted partner. However, for us to get any support from them I can't log a call directly with Rapid7 InsightVM. I have to work with the distributor to log the call for me."

"The integration with other solutions like JIRA could be better. Perhaps there could be some additional updates in the next phase that could integrate with it, so then you can proceed with the VT much easier."

"The integration with other solutions like JIRA could be better."

"There are end-user needs and expectations that are being overlooked in the development that could be addressed by appointing a customer advisory board."

"I have had some difficult problems with InsightVM. The InsightVM cannot scan if we connect to our customer by the VPN."

"There is a significant learning curve, that non-technical individuals, especially those not specialized in computer science or the information security industry, might face."

"There should be containerization within the VM."

"We found that after you passed an endpoint, it didn't always reflect it in the next scan. I'm not sure if it was a glitch or some issue with the product's software. That was never clear. That was always an issue and something that definitely needed improvement."

More Rapid7 InsightVM cons

Pricing and Cost Advice

"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."

"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."

"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."

"Qualys TotalCloud is expensive."

"Qualys TotalCloud offers cost-effective licensing flexibility."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."

More Qualys TotalCloud pricing and cost advice

"For Professional, it's about $400 per year."

"PortSwigger Burp Suite Enterprise Edition is neither a cheap nor an expensive product. PortSwigger Burp Suite Enterprise Edition is a good tool for companies."

"The tool's pricing is reasonable and costs around 400 dollars per year."

"Although the solution can be a bit expensive for small companies, its pricing is fairly reasonable for its capabilities."

"PortSwigger Burp Suite Enterprise Edition is expensive compared to other solutions."

"Its licensing is yearly. Everything is included in the price for one year."

"Pricing is reasonable because we pay according to asset usage. We can define our assets and sites according to our preference."

"I do not have experience with the pricing of the solution."

"The product is cheaper than the other similar tools available in the market."

"A full license for the solution is expensive because it is at the organizational level and not by individual users."

"The solution is a bit more reasonably priced than other products."

"The price of the solution is less than the competitors."

"It is pretty expensive. It depends on what you consider pricey, however, if you only look at vulnerability management solutions, such as within VM or VMDR, there are, I suppose the prices are almost the same. But I believe you will discover that for yourself."

More Rapid7 InsightVM pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

13%

Comms Service Provider

12%

Outsourcing Company

11%

Financial Services Firm

10%

Financial Services Firm

19%

Government

Manufacturing Company

Construction Company

Financial Services Firm

12%

Manufacturing Company

Computer Software Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	5
Large Enterprise	31

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	2
Large Enterprise	7

By reviewers
Company Size	Count
Small Business	29
Midsize Enterprise	14
Large Enterprise	25

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

What needs improvement with Qualys TotalCloud?

To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...

What is your experience regarding pricing and costs for PortSwigger Burp Suite Enterprise Edition?

I am using the Community Edition, which is free, however, I understand there might be extra expenses for additional f...

What needs improvement with PortSwigger Burp Suite Enterprise Edition?

It would be beneficial if Burp Suite provided predefined payloads for each attack category, such as SQL injection and...

What is your primary use case for PortSwigger Burp Suite Enterprise Edition?

I work with security testing tools for SaaS, focusing on static application security testing and using tools like Bur...

How would you choose between Rapid7 InsightVM and Tenable Nessus?

You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. Yo...

What is your experience regarding pricing and costs for Rapid7 InsightVM?

My experience with the pricing, setup cost, and licensing is that both the setup cost and licensing are great.

What needs improvement with Rapid7 InsightVM?

To improve Rapid7 InsightVM, I wish to have integration with patching systems, which would be useful to us. The usabi...

Microsoft Defender for Cloud vs Qualys TotalCloud

Comparisons

Wiz vs Qualys TotalCloud

Compared 10% of the time

Compared 8% of the time

JupiterOne vs Qualys TotalCloud

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 6% of the time

AWS Security Hub vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Seal Security vs PortSwigger Burp Suite Enterprise Edition

Compared 27% of the time

Acunetix vs PortSwigger Burp Suite Enterprise Edition

Compared 7% of the time

Rapid7 InsightAppSec vs PortSwigger Burp Suite Enterprise Edition

Compared 7% of the time

Tenable Nessus vs PortSwigger Burp Suite Enterprise Edition

Compared 7% of the time

AppCheck vs PortSwigger Burp Suite Enterprise Edition

Compared 6% of the time

More PortSwigger Burp Suite Enterprise Edition Competitors

Qualys Exposure Management vs Rapid7 InsightVM

Compared 13% of the time

Tenable Nessus vs Rapid7 InsightVM

Compared 11% of the time

Tenable Security Center vs Rapid7 InsightVM

Compared 10% of the time

Arctic Wolf Managed Risk vs Rapid7 InsightVM

Compared 4% of the time

IBM Guardium Vulnerability Assessment vs Rapid7 InsightVM

Compared 4% of the time

More Rapid7 InsightVM Competitors

Product Reports

Qualys TotalCloud

Download Qualys TotalCloud product report

PortSwigger Burp Suite Enterprise Edition

Download PortSwigger Burp Suite Enterprise Edition product report

PortSwigger Burp Suite Enterprise Edition report

Rapid7 InsightVM

Download Rapid7 InsightVM product report

Also Known As

Qualys TotalCloud with FlexScan

No data available

InsightVM, NeXpose

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

PortSwigger Burp Suite Enterprise Edition is a comprehensive tool for web application security testing, emphasizing ease of use for dynamic scanning and vulnerability assessments. Its automation capabilities enhance efficiency and insights into API, web, and mobile app security.

PortSwigger Burp Suite Enterprise Edition is designed for vulnerability assessment, web app security testing, and dynamic application scanning. It enables teams to perform thorough assessments through automated brute force and active scanning features. With extensions, CI/CD integration, and automation, it provides a scalable environment, supporting manual and automated testing seamlessly. Users benefit from effective network call logging, vulnerability interception, and customizable scripting. Organizations from sectors such as IT services and medical equipment rely on it for penetration testing and application auditing, benefiting from its frequent improvements and integration capabilities.

What are the key features of PortSwigger Burp Suite Enterprise Edition?

Active Scan: Facilitates comprehensive exploration and security insights.
Automation and CI/CD Integration: Enhances efficiency through seamless workflow integration.
Extensions: Expands functionality to meet specific testing needs.
Parallel Scans: Supports high ROI by enabling multiple simultaneous tests.
Customizable Scripting: Offers tailored testing scenarios for diverse applications.

What benefits and ROI should users consider?

Ease of Use: Allows even beginners to conduct dynamic scanning.
Scalability: Ensures efficient assessments across large environments.
Process Optimization: Seamless integration supports streamlined workflow.
Frequent Improvements: Regular updates to address current issues and needs.

In sectors like medical devices and IT services, PortSwigger Burp Suite Enterprise Edition is integral for penetration testing and compliance verification. Teams use it for manual and automated testing in web and mobile applications, assessing APIs and interpreting network calls to enhance security and certification processes.

PortSwigger

Rapid7 InsightVM provides advanced vulnerability scanning and remediation tracking with real-time data integration. Its intuitive interface supports both agent and agentless modes, enhancing cybersecurity by reducing exploitable vulnerabilities.

Rapid7 InsightVM integrates smoothly with existing security infrastructure, supporting detailed dashboards and reporting features for efficient risk scoring and vulnerability management. Users value its comprehensive asset tagging and the ability to prioritize vulnerabilities, appreciating host discovery capabilities. While InsightVM requires enhancements in reporting flexibility and patch management integration, and users seek improved support response times and extended security measures. Desired improvements also include greater integration with other tools and expanded dashboard customization.

What are the key features of Rapid7 InsightVM?

Vulnerability Scanning: Delivers detailed assessments of network vulnerabilities.
Risk Scoring: Provides efficient risk prioritization guided by detailed analytics.
Dashboards: Offers customizable, comprehensive metrics for insightful reporting.
Asset Tagging: Supports efficient asset management with intuitive tagging capabilities.
Host Discovery: Features robust host discovery for enhanced security coverage.

What benefits should reviews highlight?

Real-Time Data: Enables timely and accurate vulnerability management.
Intuitive Interface: Facilitates easier user interaction and quick access to vital functions.
Integration Capabilities: Seamlessly works with existing systems for enhanced security.
False Positives Reduction: Improves accuracy, minimizing reporting errors.
Comprehensive Insight: Provides valuable insights that aid in prioritization and remediation.

InsightVM's implementation spans several industries, offering robust solutions in vulnerability management, patch management, and cybersecurity compliance facilitation. Organizations leverage its capacity for comprehensive network monitoring and critical vulnerability visibility to enhance their cybersecurity posture.

Rapid7

Sample Customers

Information Not Available

Nasa, Disney, Dow Jones, Iberia Bank, IBM, Ernest and Young, Apple, Ryanair, Thyssenkrupp, Delivery Hero

ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM

PortSwigger Burp Suite Enterprise Edition vs. Rapid7 InsightVM