Try our new research platform with insights from 80,000+ expert users

Rapid7 InsightVM vs The NodeZero Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.4
Reviews Sentiment
8.2
Number of Reviews
5
Ranking in other categories
Vulnerability Management (18th), Continuous Threat Exposure Management (CTEM) (2nd)
Rapid7 InsightVM
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
64
Ranking in other categories
Risk-Based Vulnerability Management (4th)
The NodeZero Platform
Average Rating
5.0
Reviews Sentiment
6.4
Number of Reviews
3
Ranking in other categories
Vulnerability Management (45th), Penetration Testing Services (4th), Breach and Attack Simulation (BAS) (5th)
 

Mindshare comparison

Risk-Based Vulnerability Management
Vulnerability Management
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
Anusha Sadasivani - PeerSpot reviewer
Rapid deployment and user-friendly architecture streamline vulnerability management but customer support response needs improvement
We are still using Rapid7 InsightVM I personally still use Rapid7 InsightVM. We use Rapid7 InsightVM for vulnerability scanning. It supports both agent-based and agentless scanning, which is part of our vulnerability management strategy. The agentless scan in Rapid7 InsightVM is effective and…
AH
Deploying autonomous security tools improves network protection and efficiency
One of the areas where improvement is needed is in the visibility and reporting for large enterprises. The existing GUI or NodeZero insights provide better visibility, but there's still room for enhancement. Moreover, there is a need to automate interactions with other systems, particularly in triggering or opening tickets in ServiceNow ( /products/servicenow-reviews ). Adding the application layer would also be valuable for clients.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Zafran has become an indispensable tool in our cybersecurity arsenal."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"Zafran is an excellent tool."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"We saw benefits from Zafran Security almost immediately after deploying it."
"The solution works well."
"The most important aspect of the solution is that it rarely gives false positives, especially compared to other products. It provides very clear reports for our IT teams to look at."
"The most valuable features are its reporting capabilities and the host discovery functionality."
"The remediation project is a pretty effective because it allows us, as clients or countries, to choose specific assets and set limitations on them for a certain period which allows us to track and follow up on those limitations. However, when it comes to real-time monitoring and live dashboards, InsightVM doesn't quite fit the bill. It's not a real-time solution and is not instant."
"I really love the new platform. It is really easy to understand, use, and deploy."
"The most valuable features of Rapid7 InsightVM are the accurate level of scanning and the workflows are good."
"The product is scalable."
"I rate InsightVM eight out of 10 for ease of setup. It takes two or three engineers to deploy. The solution requires some maintenance. It's mainly cleaning up data."
"Overall, I'd rate NodeZero at nine to 9.5 out of ten."
"Penetration testing and scans are useful features."
"I rate the stability of the NodeZero Platform a ten out of ten."
 

Cons

"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"One area I would like to improve in InsightVM is its integration with other solutions."
"This solution creates false-positives which can cause issues with reporting."
"Patch management is the only missing feature I can think of. Rapid7 detects vulnerabilities, but it should also help you manage patches."
"Technical support does not respond quickly."
"Rapid7 InsightVM should improve its threat intelligence."
"There is room for improvement on its cloud side. In the next release I would like to see better reporting."
"Some difficulties with the online reporting and lack of integrations."
"The reporting could be better."
"The reports are quite useless."
"One of the areas where improvement is needed is in the visibility and reporting for large enterprises."
 

Pricing and Cost Advice

Information not available
"Licensing fees are paid on a yearly basis."
"Pricing is reasonable because we pay according to asset usage. We can define our assets and sites according to our preference."
"InsightVM is an expensive product, especially compared to its competitors, at around a million NOK per year."
"We purchase annual licenses."
"Comparing the price with the value that we receive, I am not happy with it."
"I do not have experience with the pricing of the solution."
"The tool's price is neither too high nor too low. My company needs to pay 65,000 per year. There are no additional costs apart from the licensing fees attached to the solution."
"Its pricing depends on the number of users per month."
Information not available
report
Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.
857,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
12%
Manufacturing Company
6%
Healthcare Company
6%
Educational Organization
27%
Computer Software Company
10%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
13%
Educational Organization
8%
Manufacturing Company
8%
University
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
The current pricing of Zafran Security is fair overall. They were good to work with to accommodate our organization w...
What needs improvement with Zafran Security?
The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvement...
What is your primary use case for Zafran Security?
Zafran Security is helping reduce the amount of critical vulnerabilities in our environments that require prompt reme...
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. Yo...
What do you like most about Rapid7 InsightVM?
The product's initial setup phase was very easy.
What is your experience regarding pricing and costs for Rapid7 InsightVM?
The customers are mostly SMBs, though some enterprise organizations have also deployed the solution. This is neither ...
What do you like most about Horizon3.ai?
Penetration testing and scans are useful features.
What needs improvement with Horizon3.ai?
One of the areas where improvement is needed is in the visibility and reporting for large enterprises. The existing G...
What is your primary use case for Horizon3.ai?
The primary use case for the NodeZero Platform is as an extension to existing vulnerability management systems. Initi...
 

Also Known As

No data available
InsightVM, NeXpose
Horizon3.ai
 

Overview

 

Sample Customers

Information Not Available
ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
Information Not Available
Find out what your peers are saying about Qualys, Tenable, Rapid7 and others in Risk-Based Vulnerability Management. Updated: June 2025.
857,028 professionals have used our research since 2012.