Try our new research platform with insights from 80,000+ expert users

Rapid7 InsightVM vs Varonis Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Vulnerability Management (18th), Continuous Threat Exposure Management (CTEM) (3rd)
Rapid7 InsightVM
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
65
Ranking in other categories
Risk-Based Vulnerability Management (4th)
Varonis Platform
Average Rating
8.4
Reviews Sentiment
6.4
Number of Reviews
17
Ranking in other categories
Email Security (15th), Data Loss Prevention (DLP) (4th), User Entity Behavior Analytics (UEBA) (3rd), Data Governance (4th), SaaS Security Posture Management (SSPM) (1st), Data Security Posture Management (DSPM) (3rd), Compliance Management (7th), Ransomware Protection (7th), Identity Threat Detection and Response (ITDR) (6th), Insider Risk Management (1st), AI Security (3rd)
 

Mindshare comparison

Risk-Based Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Rapid7 InsightVM11.0%
Qualys VMDR12.7%
Tenable Security Center9.0%
Other67.3%
Risk-Based Vulnerability Management
Data Loss Prevention (DLP) Market Share Distribution
ProductMarket Share (%)
Varonis Platform6.5%
Microsoft Purview Data Loss Prevention8.9%
Forcepoint Data Loss Prevention6.2%
Other78.4%
Data Loss Prevention (DLP)
 

Featured Reviews

Reviewer6233 - PeerSpot reviewer
Works at a healthcare company with 10,001+ employees
Has become an indispensable tool in our cybersecurity arsenal
While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even greater value. One key area for enhancement is the searching capabilities within its vulnerabilities module. By incorporating the ability to create Boolean searches, users would gain the ability to apply more complex filters and customize their search criteria. This would greatly enhance the precision and efficiency with which security teams can identify and prioritize vulnerabilities. Having such tailored search capabilities would save time and resources by narrowing down vast lists of vulnerabilities to those that meet specific parameters relevant to our unique risk environment. Additionally, integrating more robust reporting and visualization tools would be advantageous. Enhanced dashboards that offer customizable visual representations of risk configurations and threat landscapes would facilitate better communication with stakeholders, making it easier to explain vulnerabilities and the rationale behind certain security measures. This would also aid in demonstrating the improvements and value derived from existing security investments to leadership and non-technical team members.
FL
Senior Manager - Pre-Sales at Trillium Information Security Systems
Offers robust compliance features but needs improved automation in remediation
The automation capability remediation needs improvement. The current process requires manually telling IT teams to remediate vulnerabilities, and then they update the status of these vulnerabilities in the platform. This basic feature that Rapid7 calls an automated remediation process is actually manual. We can update the status of vulnerabilities in the Rapid7 InsightVM platform and collectively see how many vulnerabilities we have identified and how many are remediated by our IT team. More automation in the remediation feature is a basic demand from many customers. The remediation part and vulnerability identification of network devices or rigid devices are not currently supported by Rapid7 InsightVM. More integration and automation are the two areas Rapid7 needs to improve in their product.
SureshKumar - PeerSpot reviewer
Technical Consultant at Satcom Infotech Pvt Ltd
Has improved data visibility and protection while enabling automated compliance monitoring
Varonis Platform offers multiple features for data protection, such as data discovery and classification. We can identify, discover, and classify sensitive data effectively, which is crucial given the DPDP law in India and GDPR. The platform also excels in access and exposure tracking, enabling us to monitor users, permissions, and reduce access to sensitive files. Additionally, it includes UEBA for behavior analytics and threat detection, making it valuable for compliance and audit readiness. Varonis Platform has helped our organization primarily for DPDP compliance, although I currently don't have a specific example related to GDPR or HIPAA. A unique feature of Varonis Platform that stands out to me is that, in the current market, it is one of the best data classification solutions available. Compared to others such as Forcepoint, Varonis Platform is agent-based and AI-driven for detection and response, identifying data based on its content and context, and it includes automated remediation and lifecycle automation, making it a leading product in the market.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We are able to see the real risk of a vulnerability on our environment with our security tools."
"We saw benefits from Zafran Security almost immediately after deploying it."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"With Zafran Security, it integrates with your security controls, allowing you to take that risk score and reduce it based on the controls in place or increase the risk based on different factors, such as if the issue is internet reachable or if there's an exploit in the wild."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"Zafran is an excellent tool."
"The cost is what is most valuable. Compared to the other products on the market, the cost is more palatable."
"InsightVM's best features are the vulnerability database and remediation steps."
"One of the most valuable features is it's graphical dashboard feature. It is quite easy to manage the widgets, and we can customize those according to our queries."
"The most valuable feature is the site scanning, where we can provide a complete subnet and what it is we need to scan on those devices."
"It is good and fits well with pretty much all of our use case needs."
"The most valuable features are its reporting capabilities and the host discovery functionality."
"The stability of Rapid7 InsightVM is excellent."
"The most valuable feature of the Rapid7 InsightVM solution is the Live Risk Score."
"It can easily identify unusual behavior or access patterns that may pose a potential threat, while operating as a unified reporting system."
"In my experience, the best features that Varonis Platform offers are data labeling, data classification, along with all the integrations and its easy-to-use platform."
"On the Varonis side, technical support is phenomenal. Their ability to explain is very good, and they seem to be very knowledgeable. When I get an alert that doesn't quite make sense, they dive in there and kind of take me through it. That's very useful and very good. There are some false alerts, but it is better to have a false alert than no alert at all."
"The telemetry to capture everything and the reports are very easy to configure without having a developer degree."
"Varonis Platform is transparent and captures everything in the environment without impacting the performance. The tool helps us unify data feeds into a single reporting system."
"There's also a 90-day policy where if a user is not using the warehouse, it will automatically delete that username."
"That alerting and reporting service is great."
"Technical support from Varonis is rated as nine out of ten."
 

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"There should be containerization within the VM."
"The solution should include a tighter integration with third-party threat modeling and threat intelligence tools."
"There have been instances where technical support takes a long time to update the status of a ticket, which is something that can be improved."
"There is a significant learning curve, that non-technical individuals, especially those not specialized in computer science or the information security industry, might face."
"The product's documentation could be enhanced with clearer and more detailed instructions."
"Some of our customers want to be completely cloud based, and Rapid7 doesn't offer this as an option."
"I think the improvement in the tool should be to provide a better update to users because sometimes the information within the cloud and the scanner are not synchronized very fast."
"Their customer support should be improved, and the effectiveness of scans also needs to be improved."
"The product is very complicated."
"We have Microsoft Office 365. I just saw an article today which says that they're actually getting integrated with Microsoft Office 365, which would be a useful feature. For user-based reports, log on activity, and stuff like that, it doesn't seem to really be present like Log360. That could just be my inexperience with it. I've been dealing with it for only about two and a half months."
"Varonis requires more access permissions for its core functions compared to competitors, which can be a concern for companies about data safety."
"The solution's interface is a little complicated with regard to setting up filters and reports."
"I'd like to see automatic updates for this solution. Currently, it's a manual process to update all the keywords"
"While Varonis Platform is powerful, the initial data scanning and indexing can take significant time in large environments."
"It would be beneficial if the reporting in Varonis Platform could use PDFs instead of Excel for better graphs, as the dashboards are really good, and it would be nice to have simplified dashboards in PDF for business reporting purposes."
"It is significantly complex."
 

Pricing and Cost Advice

Information not available
"The price of the solution is less than the competitors."
"I do not have experience with the pricing of the solution."
"Pricing is reasonable because we pay according to asset usage. We can define our assets and sites according to our preference."
"The license is IP based. How many IPs you are using to scan is the amount of the license you have to buy. The number of users doesn't matter; many users can use it or only person. It depends on the culture of the organization."
"InsightVM is an expensive product, especially compared to its competitors, at around a million NOK per year."
"It is pretty expensive. It depends on what you consider pricey, however, if you only look at vulnerability management solutions, such as within VM or VMDR, there are, I suppose the prices are almost the same. But I believe you will discover that for yourself."
"The licensing is asset-based and very straightforward."
"Comparing the price with the value that we receive, I am not happy with it."
"The platform is expensive. I rate the pricing a nine out of ten."
"I would rate the pricing an eight out of ten, with ten being the most expensive."
"You could do a subscription, where you pay yearly, or you could purchase it outright. The licensing cost is based on the number of users on the system that you are monitoring."
"Varonis Platform wasn't certainly the cheapest solution."
"The pricing is good. It neither expensive nor cheap. It is average."
"It's expensive, kind of, really expensive."
"Licensing is on an annual basis. Maintenance and renewal fees are separate. Varonis Datalert is quite expensive."
report
Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.
879,899 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
8%
Computer Software Company
8%
Outsourcing Company
6%
Financial Services Firm
12%
Manufacturing Company
11%
Computer Software Company
10%
Government
6%
Financial Services Firm
15%
Manufacturing Company
10%
Computer Software Company
8%
Insurance Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise13
Large Enterprise24
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise12
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. Yo...
What do you like most about Rapid7 InsightVM?
The product's initial setup phase was very easy.
What is your experience regarding pricing and costs for Rapid7 InsightVM?
The customers are mostly SMBs, though some enterprise organizations have also deployed the solution. This is neither ...
What do you like most about Varonis Platform?
The solution has significantly improved data security and compliance posture by allowing us to track and monitor acti...
What needs improvement with Varonis Platform?
While Varonis Platform is powerful, the initial data scanning and indexing can take significant time in large environ...
What is your primary use case for Varonis Platform?
My main use case for Varonis Platform is for data classification on the user's machine, specifically for data visibil...
 

Also Known As

No data available
InsightVM, NeXpose
SlashNext Complete
 

Overview

 

Sample Customers

Information Not Available
ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
Nottingham Building Society
Find out what your peers are saying about Qualys, Tenable, Rapid7 and others in Risk-Based Vulnerability Management. Updated: January 2026.
879,899 professionals have used our research since 2012.