Try our new research platform with insights from 80,000+ expert users

Rapid7 InsightVM vs Red Canary comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
8.1
Number of Reviews
3
Ranking in other categories
Vulnerability Management (27th), Continuous Threat Exposure Management (CTEM) (6th)
Rapid7 InsightVM
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
62
Ranking in other categories
Risk-Based Vulnerability Management (4th)
Red Canary
Average Rating
9.0
Reviews Sentiment
7.7
Number of Reviews
5
Ranking in other categories
Advanced Threat Protection (ATP) (24th), Endpoint Detection and Response (EDR) (40th), Managed Detection and Response (MDR) (13th), Risk-Based Vulnerability Management (14th)
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
Mahmoud Elhamaymy - PeerSpot reviewer
Reliable scanning and integration strengthen security infrastructure
InsightVM has a very organized GUI with ease of use. The vulnerability scans are reliable, and the credential scan is a beneficial feature. The solution is efficient and trustworthy. It's based on the CVSS risk scoring system, which is well-recognized and effective. The integration capabilities through APIs allow easy integration with existing security infrastructure.
Sagar Shekhar - PeerSpot reviewer
An open-source tool that offers great automation capabilities
Red Canary MDR generates a lot of output, so it would be good if, in the end, it generates a summary of all the previous attacks and what was the outcome of a single attack, especially so that it becomes easy for the user to see the summary and analyze the whole thing. In general, the solution currently fails to provide a summary to its users.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Zafran is an excellent tool."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"I really love the new platform. It is really easy to understand, use, and deploy."
"The most valuable feature for us is the different types of reporting it provides."
"When you connect any new device to the network, Rapid7 has the ability to detect the new device immediately. It can scan that device to detect if it has any vulnerability. It tells you what is vulnerable and what has been misconfigured. It also tells you what is the risk of that misconfiguration or lack of patches and how to resolve the problem."
"One of the most valuable features is it's graphical dashboard feature. It is quite easy to manage the widgets, and we can customize those according to our queries."
"The most valuable features are its reporting capabilities and the host discovery functionality."
"The most valuable features of Rapid7 InsightVM are the accurate level of scanning and the workflows are good."
"The performance is good."
"Has great reporting features."
"The solution works well for what we use it for and the support and protection are good."
"The near real-time review translates into near real-time action. So, in addition to alerting, Red Canary MDR has response playbooks built out."
"I recommended Red Canary to my friends who work in other organizations."
"The valuable features of this solution are it integrates well with different EDR software, such CrowdStrike, and Carbon Black, and the information it provides is helpful."
"The most valuable feature of the solution is its automation part."
 

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"I’d like to see Rapid7 InsightVM improve by adding a knowledge base similar to what Qualys offers. This would help us easily check and search for vulnerabilities using Rapid7 IDs associated with CVs or CVSS. From a features perspective, everything was fine at the time, and the security features of Rapid7 InsightVM were effective."
"The reporting could be better."
"I would say that it improved our visibility, but it left things open."
"A definite improvement would be to make it easier to run ad-hoc scans without needing to assign the asset to a site or group."
"Rapid7 InsightVM should improve its threat intelligence."
"Some difficulties with the online reporting and lack of integrations."
"There is room for improvement on its cloud side. In the next release I would like to see better reporting."
"Technical support does not respond quickly."
"The most valuable feature of Red Canary MDR is the overall threat protection it provides."
"Red Canary's pricing spectrum may not be ideal for smaller financial institutions."
"In general, the solution currently fails to provide a summary to its users."
"The price could always be better."
"I would like there to be an on-premise version of this solution for our data centers because of the proliferation of online threats."
 

Pricing and Cost Advice

Information not available
"The product is cheaper than the other similar tools available in the market."
"The price of the solution is less than the competitors."
"In some cases, we procure the licenses. In some cases, the customers directly buy the license from Rapid7."
"The license is annual and this is the optimal approach when it comes to most software."
"This solution is expensive, but it's fine for us as we have an open budget for security solutions. Protection and having the system secured is more important."
"It is less expensive compared to other competitors."
"Comparing the price with the value that we receive, I am not happy with it."
"The solution's pricing is better than Nexus which charges a high amount for very little use."
"The solution could vary in price depending on how many endpoints a company has."
"I have not compared Red Canary to other solutions to know if the price is high or low. However, I have found the price of this solution fair and reasonable, it cost approximately $100 per year, per device. If they could provide the solution for $50 per year, per device, it would be better."
"Red Canary MDR I use is an open-source tool."
report
Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.
850,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
12%
Manufacturing Company
7%
Government
6%
Educational Organization
38%
Computer Software Company
9%
Financial Services Firm
8%
Manufacturing Company
7%
Educational Organization
15%
Computer Software Company
13%
Financial Services Firm
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
I find that the pricing for Zafran aligns well with the comprehensive features it offers. The asset and user-based li...
What needs improvement with Zafran Security?
Zafran is a new startup. Features are continuously being added or improved. 1) Continued integrations with existing (...
What is your primary use case for Zafran Security?
We connect this to our vulnerability scanner as input, our security tools to better determine risk, and our change ma...
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. Yo...
What do you like most about Rapid7 InsightVM?
The product's initial setup phase was very easy.
What is your experience regarding pricing and costs for Rapid7 InsightVM?
Pricing is reasonable and competitive compared to other solutions in the market. Customers are generally satisfied an...
What do you like most about Red Canary MDR?
The most valuable feature of the solution is its automation part.
What needs improvement with Red Canary MDR?
Red Canary's pricing spectrum may not be ideal for smaller financial institutions.
 

Also Known As

No data available
InsightVM, NeXpose
Red Canary Managed Detection and Response (MDR)
 

Overview

 

Sample Customers

Information Not Available
ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
DuPont, Quanta Services, Microchip Technology, Hopkins Public Schools, Henny Penny, Schumacher Homes
Find out what your peers are saying about Rapid7 InsightVM vs. Red Canary and other solutions. Updated: April 2025.
850,028 professionals have used our research since 2012.