Automox vs. Rapid7 InsightVM

It is perfectly suited for organizations with a small IT staff and large amount of devices. It's also perfect for pushing software to machines that are not on the network or VPN. It's less effective for server patch management. I like to have a little more control of my server patching

Incentivized

Rapid7 InsightVM is perfect for a scenario where IT admin or CISO wants to scan its infrastructure to be sure that there is no vulnerability that could be exploited from outside or inside the company. It also could be used to automate patching and dealing with vulnerabilities. It's also adapted for users that need cloud security management

Incentivized

• Excellent support for Windows-based systems. Rarely have any issues updating those systems.
• When issues do arise, the Automox support team has been very responsive and informative of solutions (or where projects are on potential roll out dates).
• The user interface is intuitive and easy to use.

Incentivized

• Being a vulnerability scanner tool, its purpose is to scan the systems to find the vulnerabilities. We can define the assets like IP address for the scans and it also allows to either schedule the scan at a preferred time or start the scan immediately. Upon completion of the scan, this tool can result provide the details like host type, OS information, hardware address, along with the vulnerabilities.
• Rapid7 Nexpose has a list of templates to perform the scan. Once the templates are defined then the scans are performed accordingly.
• It also contains an option to add credentials/authentication using passwords, usernames, private keys to perform the credential-based scans which I think is a great feature.

Incentivized

• initial deployment of agents to all end points was a challenge, would have been great if there was a way for Automox to discover and install.
• Sometimes upgrading the Automox client which becomes old due to an end point not connecting for a long time becomes challenging as it becomes incompatible and has to be upgraded manually
• It would good to have a functionality where an end point device can be turned into a brick if desired in cases where the device is not returned back after an employee is terminated. This should also have the option of turning it back into an active device if we choose to

Incentivized

• In comparison to Tenable SecurityCenter we saw it didn't exactly find the same vulnerabilities which we would assume it should have
• We rely on a ticketing system and not our VM tool to assign tasks so wasn't too useful having that in there
• Filtering capabilities aren't as good as its competitors

Incentivized

The system is really simple. We pushed the installer out through Group policy. Devices connected can get further defined by Tags or Groups.

Incentivized

After using a combination of WSUS and group policy to manage patching on a large number of devices, it was excellent to move to a single-pane experience where patch policies, restart schedules, reports, and device status can be seen easily and quickly. Its pre-patch report on policies is particularly handy so you can check if devices will take the appropriate action before it's run.

Incentivized

In my experience, they were responsive but the fixes were more like bandaids than a fix for the underlying problems which they admitted were on their end.

Incentivized

I gave it a seven due to the functionality and general ease of use after the initial setup headaches, but compared to Qualys, Rapid7 Nexpose falls short on features and ease of use. Their support drags this rating down a point as well. I have gone weeks with no update on semi-critical issues and typically have to make call after call to get a semi-coherent response.

Incentivized

We stoppped using PDQ because it required our users to connect to the corporate VPN. It might take months for some remote users to receive a patch, and often we would have to schedule time with them one-on-one to ensure that it got done. With Automox, we don't have to do any of that - it just happens silently in the background.

Incentivized

Nessus Pro does scans, but does not maintain an inventory from scan to scan. There is no history for a specific device, you have to look inside the results of each scan. Search across inventory is non-existent. There are no dashboards for data analysis. This is no tracking for remediation

Incentivized

• Automox allows us to fix vulnerabilities in the shortest amount of time ever.
• The automated patching and end point management features have made our jobs much easier.
• We get to focus on more important tasks and not have to manually patch the operating systems.

Incentivized

• Can reduce time to patch most critical vulnerabilities
• Can help to identify who is spending time patching things of lower risk thus keeping the organization in a more vulnerable position
• Easily provides the patch team with a work plan to enhance security more quickly

Incentivized