No more typing reviews! Try our Samantha, our new voice AI agent.

Rapid7 InsightVM vs UpGuard Vendor Risk comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Rapid7 InsightVM
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
66
Ranking in other categories
Vulnerability Management (12th), Risk-Based Vulnerability Management (4th)
UpGuard Vendor Risk
Average Rating
0.0
Number of Reviews
0
Ranking in other categories
IT Vendor Risk Management (17th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Rapid7 InsightVM is designed for Risk-Based Vulnerability Management and holds a mindshare of 8.1%, down 14.1% compared to last year.
UpGuard Vendor Risk, on the other hand, focuses on IT Vendor Risk Management, holds 2.3% mindshare, down 3.8% since last year.
Risk-Based Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Rapid7 InsightVM8.1%
Qualys VMDR9.8%
Tenable Security Center7.6%
Other74.5%
Risk-Based Vulnerability Management
IT Vendor Risk Management Mindshare Distribution
ProductMindshare (%)
UpGuard Vendor Risk2.3%
OneTrust GRC8.7%
RSA Archer7.1%
Other81.9%
IT Vendor Risk Management
 

Featured Reviews

reviewer2775840 - PeerSpot reviewer
Manager at a financial services firm with 5,001-10,000 employees
Manages vulnerabilities effectively over time but needs improvement in web coverage and dashboard flexibility
Most of the dynamic asset tagging we use is manual, not dynamic. To manage the assets, we employed the manual approach because we have a limitation regarding the license, so we don't use the dynamic approach much. I don't know how the configuration assessment has assisted with meeting compliance standards. The product that we use is the on-premise solution where we configure assets and dynamically scan them. However, we use the default policies more, the template, so Rapid7 InsightVM on-premise version is not that effective in the web-related systems. However, it is best on the OS to identify and discover the OS-related vulnerabilities, more of open ports and the discovery of vulnerable ports or services. It would be better to improve Rapid7 InsightVM by including or working better to add web-related templates because it's not that effective in regard to web. I don't know if they may have a separate product regarding the web, but for the on-premise type, they are not strong in this area. I would prefer to see web-related templates in addition to improving the dashboard-related things because the dashboard has been constant for a very long time. It would be better to see various kinds of, perhaps a flexible type of dashboard. If it's not customizable at all, I would want to see the risk and asset over time with more flexibility. The current dashboard is not flexible in this regard; I have to dig down every day, so they should work on this as well, in addition to the web.
Use UpGuard Vendor Risk?
Leave a review
report
Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.
896,563 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Manufacturing Company
9%
Computer Software Company
7%
Comms Service Provider
6%
Financial Services Firm
11%
Government
11%
Manufacturing Company
10%
Healthcare Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise14
Large Enterprise25
No data available
 

Questions from the Community

How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. You can easily prioritize vulnerabilities using attacker analytics. Overall, Rapid...
What is your experience regarding pricing and costs for Rapid7 InsightVM?
My experience with the pricing, setup cost, and licensing is that both the setup cost and licensing are great.
What needs improvement with Rapid7 InsightVM?
To improve Rapid7 InsightVM, I wish to have integration with patching systems, which would be useful to us. The usability of Rapid7 InsightVM is excellent, and the reporting module is one of the mo...
Ask a question
Earn 20 points
 

Also Known As

InsightVM, NeXpose
ScriptRock
 

Overview

 

Sample Customers

ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
ADP, E Trade, Cisco, Trek, GSA, Backcountry, Mimeo.com, Citrix, RackSpace, Modern Woodhouse, CFA Institute, Allianz
Find out what your peers are saying about Qualys, Horizon3.ai, Tenable and others in Risk-Based Vulnerability Management. Updated: May 2026.
896,563 professionals have used our research since 2012.