Kaseya VSA vs. Rapid7 InsightVM

This package is well suited for businesses of any size that needs a method of connecting to systems on or off the network. This is one of the few packages that doesn't require the end user to provide permission before allowing the techs to connect which is what my agency needed as we have a majority of our systems are used by "general public" that walk in our doors and if they are doing something that they are not supposed to it would be unlikely that they would grant permission for us to access the systems.

Incentivized

I think Rapid7 InsightVM is well suited for large enterprise customers with a lot of assets. It integrates well with a number of different ITSM solutions which I think is very good. There are not many CIS benchmarking tools on the market and Rapid7 InsightVM does a very good job at benchmarking. I think where Rapid7 InsightVM falls down a little is on false positive vulnerabilities. Sometime you there a few positive results on vulnerabily discovery. Tuning the settings for scan engines can sometimes be trick as well.

Incentivized

• Scripting - Very powerful scripting engine that allows us to update/install applications and maintain PC's and Servers.
• Policy Management - Globally configured policies allowing us to make changes to thousands of PC's quickly.
• Monitoring - Monitoring engine allows us to Proactively respond to alerts quickly minimizing downtime significantly.
• Patch Management - This module requires minimal effort to manage and maintain.

Incentivized

• The API is also a great tool for us to automate lots of routine procedures like scan and report of asset(s) BY EMAIL.
• Tagging. It helps sort out results and reports for respective assets Owner for remediation without a lengthy report including unnecessary information for that particular team.
• SQL Reporting. It provides advanced reporting and export capabilities that you can not find in the stock report template.

Incentivized

• The only area I can see where a lot of room for improvement can be made is in scripting of Agent procedures. Making operations more modular and able to be assembled by technicians who might not be strong in a scripting environment would be helpful. In the mean time, Kaseya has an entire site and a whole team of developers who write Agent procedures for common tasks and make them available for free to all Kaseya VSA customers.

Incentivized

• Devices found and scanned are never removed. Removal must be done manually with no option for automation.
• The database can be fragile. Ours quietly corrupted and progressively degraded until we had to restore and lose 6 months of data. Still didn't fix it and had to be rebuilt again losing all data.
• Workflow for delegating remediation is supposed to be helpful, but can also become cumbersome.
• Scheduling can become a nightmare if not monitored closely. We found jobs had failed to run because the server had gone offline. When the server came online, it did not try to run missed jobs. Running missed jobs all at once can overload the server, but searching for and launching a large number of missed jobs manually is a pain.

Incentivized

Excellent product with easy learning curve

Incentivized

I think this is a solid tool for enterprise IT, however it would be higher if Kaseya VSA addresses the areas raised around recent stability, their support team, multiple session & screen support etc. It does do it's main job and allows an easy way for IT to operate and is mostly fine.

Incentivized

While I think it is a great tool and platform, I believe it (like all tools and solutions) is always evolving and the needs for clients are changing as the industry evolves and threats are upgraded. Cost is good, and support is helpful. Some things could be more granular and others could be easier to understand

Incentivized

It was lots of back and forth email communication whenever I tried to solve my connection issues. I would send them detailed logs of the date, time, computer, and more of when I was experiencing connection issues. All I would get is an email back a few days later saying that they didn't find an issue in the service

Incentivized

I gave it a seven due to the functionality and general ease of use after the initial setup headaches, but compared to Qualys, Rapid7 Nexpose falls short on features and ease of use. Their support drags this rating down a point as well. I have gone weeks with no update on semi-critical issues and typically have to make call after call to get a semi-coherent response.

Incentivized

We moved away from NinjaRMM for support of PowerShell scripting and APIs. Overall, the experience with NinjaRMM, though limited in features, was tenfold better than our experience with VSA. We have been desiring strongly to move away from VSA to N-Central (having been provided a full demo that we installed on our cloud infrastructure) but have been unable to do so due to Kaseya's draconian contract policies. It's important to note that NinjaRMM was allowing us to go month-to-month and switching to Kaseya VSA was one of the worst business decisions I ever made. It's equally important to note that, if you are considering Kaseya VSA, you will be locked into a 3-year contract that is nearly impossible to escape from once the documents are signed. SolarWinds N-central only requires a 1-year contract and then has month-to-month billing available. I can provide no good reason for anyone to consider Kaseya VSA when there are dozens of better systems out there to choose from.

I think Tenable is very comparable and they are both leaders in this space. I evaluated both of them side-by-side and ultimately decided to go with Rapid7. Tenable did have a slight edge on the amount of information I was getting from the machines, but I landed on R7 because I found the features of the InsightVM tool to be more useful. They both get the job done, but I found InsightVM a better experience to use on a day-to-day basis and had better quality of life features that I was looking for.

Incentivized

• It has increased the efficiency of operational tasks for our technicians
• It has change the speed at which we are able to deploy updates and software patches
• It caused us to spend additional money on more security tools due to concern from breaches

Incentivized

• It certainly has a more positive impact than negative impact while performing the scans. Nexpose can find report vulnerabilities that our other scanner fails to identify during the scan because of its defined scan templates.
• Also, even if the scan is not being performed due to some issues like reachability, whitelisting, etc. it will try to give scan results unlike QualysGuard which just marks the asset as unreachable.

Incentivized