Try our new research platform with insights from 80,000+ expert users

Rapid7 InsightVM vs Red Canary comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.4
Reviews Sentiment
8.2
Number of Reviews
5
Ranking in other categories
Vulnerability Management (18th), Continuous Threat Exposure Management (CTEM) (2nd)
Rapid7 InsightVM
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
64
Ranking in other categories
Risk-Based Vulnerability Management (4th)
Red Canary
Average Rating
9.0
Reviews Sentiment
7.6
Number of Reviews
5
Ranking in other categories
Advanced Threat Protection (ATP) (23rd), Endpoint Detection and Response (EDR) (36th), Managed Detection and Response (MDR) (13th), Risk-Based Vulnerability Management (13th)
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
Anusha Sadasivani - PeerSpot reviewer
Rapid deployment and user-friendly architecture streamline vulnerability management but customer support response needs improvement
We are still using Rapid7 InsightVM I personally still use Rapid7 InsightVM. We use Rapid7 InsightVM for vulnerability scanning. It supports both agent-based and agentless scanning, which is part of our vulnerability management strategy. The agentless scan in Rapid7 InsightVM is effective and…
Sagar Shekhar - PeerSpot reviewer
An open-source tool that offers great automation capabilities
Red Canary MDR generates a lot of output, so it would be good if, in the end, it generates a summary of all the previous attacks and what was the outcome of a single attack, especially so that it becomes easy for the user to see the summary and analyze the whole thing. In general, the solution currently fails to provide a summary to its users.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We are able to see the real risk of a vulnerability on our environment with our security tools."
"Zafran is an excellent tool."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"We saw benefits from Zafran Security almost immediately after deploying it."
"The product's initial setup phase was very easy."
"There are many integrations with things like the VMware NSX that are great, the reporting is really solid."
"I have been in contact with technical support and they are not bad."
"InsightVM's most valuable feature is risk scoring, a formula based on different vectors like the ease of exploitation and the availability of the machine."
"The solution's user interface is good and has some vulnerability prioritization."
"The product is scalable."
"Customers are generally satisfied and do not ask for drastic price reductions during renewals."
"The most valuable feature is the vulnerability scan."
"I recommended Red Canary to my friends who work in other organizations."
"The near real-time review translates into near real-time action. So, in addition to alerting, Red Canary MDR has response playbooks built out."
"The valuable features of this solution are it integrates well with different EDR software, such CrowdStrike, and Carbon Black, and the information it provides is helpful."
"The solution works well for what we use it for and the support and protection are good."
"The most valuable feature of the solution is its automation part."
 

Cons

"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"The solution should include a tighter integration with third-party threat modeling and threat intelligence tools."
"I’d like to see Rapid7 InsightVM improve by adding a knowledge base similar to what Qualys offers. This would help us easily check and search for vulnerabilities using Rapid7 IDs associated with CVs or CVSS. From a features perspective, everything was fine at the time, and the security features of Rapid7 InsightVM were effective."
"There should be containerization within the VM."
"Their customer support should be improved, and the effectiveness of scans also needs to be improved."
"One area I would like to improve in InsightVM is its integration with other solutions."
"The reporting could be better."
"Within InsightVM, there is no feature to assign a ticket. If we can have more API calls, we can do that from InsightVM."
"The product's documentation could be enhanced with clearer and more detailed instructions."
"The price could always be better."
"Red Canary's pricing spectrum may not be ideal for smaller financial institutions."
"I would like there to be an on-premise version of this solution for our data centers because of the proliferation of online threats."
"The most valuable feature of Red Canary MDR is the overall threat protection it provides."
"In general, the solution currently fails to provide a summary to its users."
 

Pricing and Cost Advice

Information not available
"It is pretty expensive. It depends on what you consider pricey, however, if you only look at vulnerability management solutions, such as within VM or VMDR, there are, I suppose the prices are almost the same. But I believe you will discover that for yourself."
"It is less expensive compared to other competitors."
"We purchase annual licenses."
"The licensing is asset-based and very straightforward."
"Pricing is reasonable because we pay according to asset usage. We can define our assets and sites according to our preference."
"The solution's pricing is better than Nexus which charges a high amount for very little use."
"The tool's price is neither too high nor too low. My company needs to pay 65,000 per year. There are no additional costs apart from the licensing fees attached to the solution."
"The product is cheaper than the other similar tools available in the market."
"Red Canary MDR I use is an open-source tool."
"I have not compared Red Canary to other solutions to know if the price is high or low. However, I have found the price of this solution fair and reasonable, it cost approximately $100 per year, per device. If they could provide the solution for $50 per year, per device, it would be better."
"The solution could vary in price depending on how many endpoints a company has."
report
Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.
859,129 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
7%
Healthcare Company
6%
Educational Organization
22%
Computer Software Company
11%
Financial Services Firm
11%
Manufacturing Company
8%
Computer Software Company
14%
Educational Organization
10%
Manufacturing Company
8%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
The current pricing of Zafran Security is fair overall. They were good to work with to accommodate our organization w...
What needs improvement with Zafran Security?
The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvement...
What is your primary use case for Zafran Security?
Zafran Security is helping reduce the amount of critical vulnerabilities in our environments that require prompt reme...
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. Yo...
What do you like most about Rapid7 InsightVM?
The product's initial setup phase was very easy.
What is your experience regarding pricing and costs for Rapid7 InsightVM?
The customers are mostly SMBs, though some enterprise organizations have also deployed the solution. This is neither ...
What do you like most about Red Canary MDR?
The most valuable feature of the solution is its automation part.
What needs improvement with Red Canary MDR?
Red Canary's pricing spectrum may not be ideal for smaller financial institutions.
 

Also Known As

No data available
InsightVM, NeXpose
Red Canary Managed Detection and Response (MDR)
 

Overview

 

Sample Customers

Information Not Available
ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
DuPont, Quanta Services, Microchip Technology, Hopkins Public Schools, Henny Penny, Schumacher Homes
Find out what your peers are saying about Rapid7 InsightVM vs. Red Canary and other solutions. Updated: June 2025.
859,129 professionals have used our research since 2012.