InsightVM (Nexpose) Pros and Cons

User friendly, easy to use, light weight, cost effective, efficient Review collected by and hosted on G2.com.

Nothing more to dislike but multiple vm runs slow. Which happens in every vm Review collected by and hosted on G2.com.

The tool's interface is good, very user-friendly and easy to use. Review collected by and hosted on G2.com.

The Tool provides Asset discovery but needs much time for the scanning Review collected by and hosted on G2.com.

No one can beat the insight VM inbuilt and customized Dashboards, query builders, best remediation module, and reporting filters. The scanning coverage, options, and authentication mechanism are good. The vulnerability identification with metasploitable modules, public exploit, and steps to replicate helps a lot. Automation features and cloud configuration assessment features are really useful. Review collected by and hosted on G2.com.

The tool does not have a real-time threat protection module, and data shown after running query builder doesn't have much more info to export. Application and Operating system-related vulnerabilities cannot be exported separately.

InsightVM support needs to improve the response time.

Do not support lot of integration from UI, API integration is bit complex Review collected by and hosted on G2.com.

InsightVM has been flexible enough to meet a variety of our vulnerability management and reporting needs across a few business units. The cloud integrations are great and allow us to feed information to other departments for remediation. Review collected by and hosted on G2.com.

Setup can still be a bit clunky. Some bugs in complex vulnerability checks can take a long time to be fixed. It can be difficult to set up reports to be concise until you have a good feel for the different options available in the console. Review collected by and hosted on G2.com.

It helps to track security details like vulnerabilities and patch information. Review collected by and hosted on G2.com.

Nothing much. Sometimes it takes time. Mostly due to network lag may be. Review collected by and hosted on G2.com.

The scalability of the scanner distribution, detailed vulnerability remediation reports, automated reports for executives, asset discovery scanning and many more. Review collected by and hosted on G2.com.

Administration and maintenance of the console and scanner engines can be a little unwieldy. At times, Rapid7 support can be slow to respond to tickets and queries. Review collected by and hosted on G2.com.

Easy to use once installed - it's pretty well a "set and forget" system that you don't need to constantly update or adjust. Interface is relatively easy to use. InsightVM has lots of features to keep your security analysts happy for days on end. Review collected by and hosted on G2.com.

Requires an on-prem management console (not just scan engine) if you have on-prem assets that need to be scanned. Requires in-depth knowledge to install and get up and running. Review collected by and hosted on G2.com.

The policy builder is one of the great feature Review collected by and hosted on G2.com.

A more convincing way of removing the assets in bulk would be great Review collected by and hosted on G2.com.

I like how InsightVM does a deeper vulnerability scan of all assets that have an IP address in our network. Network devices, hosts, IoTs, phones, etc. InsightVM also integrates very well with InsightIDR SIEM and Insight Anyconnect to remediate issues it finds. I also like how it integrates with SCCM which makes it easier for us to remediate and automate things. Review collected by and hosted on G2.com.

InsightVM for some reason had issues resolving licensing count in our deployment as well as doing exclusions when manually creating a scan group. The ability to create a scan group exclusion is critical because we use a guest network and during an IP range scanning, these devices are also reported by InsightVM. Review collected by and hosted on G2.com.

InsightVM gave us the ability to bring together several log systems and freed up our time to concentrate on the high value issues and single out the highest risk assets in the environment as well as justify removing Java from the environment that one team required an out of date version for an application. Real actionable data to provide to management to make changes in security policy. Review collected by and hosted on G2.com.

We did not have any negative experiences during deployment and use. We do still have issues with the web platform and missing features compared to the on premises server, but that is minor compared to what we have gained from the platform. Review collected by and hosted on G2.com.