Nmap vs. Rapid7 InsightVM

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Nmap
Score 9.6 out of 10
N/A
Nmap is a free, open source network discovery, mapper, and security auditing software. Its core features include port scanning identifying unknown devices, testing for security vulnerabilities, and identifying network issues.
$49,980
one-time fee
Rapid7 InsightVM
Score 8.3 out of 10
N/A
InsightVM is presented as the next evolution of Nexpose, by Rapid7. This Insight cloud-based solution features everything included in Nexpose, such as Adaptive Security and the proprietary Real Risk score, and extends visibility into cloud and containerized infrastructure. InsightVM also offers advanced remediation, tracking, and reporting capabilities not included in Nexpose.
$19
per GB
Pricing
NmapRapid7 InsightVM
Editions & Modules
Nmap OEM Small/Startup Company Redistribution License - Quarterly Term Maintenance Fee
$7,980
Every Three Months per license
Nmap OEM Mid-Sized Company Redistribution License - Quarterly Term Maintenance Fee
$11,980
Every Three Months per license
Nmap OEM Enterprise Redistribution License - Quarterly Term Maintenance Fee
$13,980
Every Three Months per license
Nmap OEM Small/Startup Company Redistribution License - Annual Maintenance Fee
$14,980
per year per license
Nmap OEM Mid-Sized Company Redistribution License - Annual Maintenance Fee
$19,980
per year per license
Nmap OEM Enterprise Redistribution License - Annual Maintenance Fee
$23,980
per year per license
Nmap OEM Small/Startup Company Redistribution License - Perpetual License
$49,980
one-time fee per license
Nmap OEM Small/Startup Company Redistribution License - 5 year prepay Maintenance Fee
$59,920
Every Five Years per license
Nmap OEM Mid-Sized Company Redistribution License - 5 year prepay Maintenance Fee
$79,920
Every Five Years per license
Nmap OEM Mid-Sized Company Redistribution License - Perpetual License
$79,980
one-time fee per license
Nmap OEM Enterprise Redistribution License - 5 year prepay Maintenance Fee
$95,920
Every Five Years per license
Nmap OEM Enterprise Redistribution License - Perpetual License
$98,980
one-time fee per license
Log Management
$19
per GB
Vulnerability Management
$22
per asset
insightIDR
$52
per asset
Application Security
$2,000
per app
insignConnect
Contact sales team
Offerings
Pricing Offerings
NmapRapid7 InsightVM
Free Trial
NoNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional DetailsAll perpetual licenses include a six-month trial period during which you can cancel for any reason and receive a full refund of all money paid (including maintenance). The term license is only a 3-month commitment and cal also be terminated with full refund during the first 30 days of the initial quarter.
More Pricing Information
Community Pulse
NmapRapid7 InsightVM
Considered Both Products
Nmap
Chose Nmap
While mainly a CLI tool, there is an unofficial GUI. This can help the learning curve but unlike Nessus and Nexpose where there is a well-made user interface, with NMAP you need to really leverage the CLI for the power behind it. When it comes to modules being community-driven …
Rapid7 InsightVM
Chose Rapid7 InsightVM
Tenable has a more refined look for the reporting that it provides as a result of scanning events, but Nexpose seems to have a better ability to help quantify risk and help prioritize the work needed to get the quickest security result for the team and the company. The Nessus …
Top Pros
Top Cons
Features
NmapRapid7 InsightVM
Network Performance Monitoring
Comparison of Network Performance Monitoring features of Product A and Product B
Nmap
8.1
16 Ratings
3% below category average
Rapid7 InsightVM
-
Ratings
Automated network device discovery8.410 Ratings00 Ratings
Network monitoring9.011 Ratings00 Ratings
Baseline threshold calculation10.05 Ratings00 Ratings
Alerts9.33 Ratings00 Ratings
Network capacity planning7.06 Ratings00 Ratings
Packet capture analysis7.06 Ratings00 Ratings
Network mapping9.515 Ratings00 Ratings
Customizable reports4.59 Ratings00 Ratings
Wireless infrastructure monitoring10.07 Ratings00 Ratings
Hardware health monitoring6.05 Ratings00 Ratings
Threat Intelligence
Comparison of Threat Intelligence features of Product A and Product B
Nmap
-
Ratings
Rapid7 InsightVM
8.4
3 Ratings
5% above category average
Network Analytics00 Ratings8.33 Ratings
Threat Recognition00 Ratings8.03 Ratings
Vulnerability Classification00 Ratings8.33 Ratings
Automated Alerts and Reporting00 Ratings8.73 Ratings
Threat Analysis00 Ratings8.33 Ratings
Threat Intelligence Reporting00 Ratings8.52 Ratings
Automated Threat Identification00 Ratings8.33 Ratings
Vulnerability Management Tools
Comparison of Vulnerability Management Tools features of Product A and Product B
Nmap
-
Ratings
Rapid7 InsightVM
8.3
3 Ratings
2% above category average
IT Asset Realization00 Ratings8.03 Ratings
Authentication00 Ratings8.33 Ratings
Configuration Monitoring00 Ratings8.73 Ratings
Web Scanning00 Ratings8.33 Ratings
Vulnerability Intelligence00 Ratings8.33 Ratings
Best Alternatives
NmapRapid7 InsightVM
Small Businesses
NinjaOne
NinjaOne
Score 9.3 out of 10
NinjaOne
NinjaOne
Score 9.3 out of 10
Medium-sized Companies
PingPlotter
PingPlotter
Score 9.5 out of 10
NinjaOne
NinjaOne
Score 9.3 out of 10
Enterprises
NETSCOUT nGeniusONE
NETSCOUT nGeniusONE
Score 8.9 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.2 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
NmapRapid7 InsightVM
Likelihood to Recommend
9.7
(17 ratings)
8.7
(10 ratings)
Support Rating
8.4
(7 ratings)
7.2
(2 ratings)
User Testimonials
NmapRapid7 InsightVM
Likelihood to Recommend
Open Source
If you're a sysadmin, or anyone who's had to deploy network services, you've almost certainly had to use Nmap at some point or other. Need to see what devices are on your LAN? Nmap can tell you that. Want to check which ports your web server has open to the internet? Nmap is your friend.
Nmap is a powerful command-line tool and has many options that require some reading of documentation to get the best out of (although generally straightforward). If the thought of working at the command-line scares you (presumably not if you're reading this review), then you may want a much simpler tool, or at least check out Zenmap GUI.
Read full review
Rapid7
Rapid7 InsightVM is perfect for a scenario where IT admin or CISO wants to scan its infrastructure to be sure that there is no vulnerability that could be exploited from outside or inside the company. It also could be used to automate patching and dealing with vulnerabilities. It's also adapted for users that need cloud security management
Read full review
Pros
Open Source
  • NMap provides a very fast and a very thorough network "sweep" that allows you to quickly map out exactly what's on your network.
  • NMap is highly configurable. The "canned" choices are very good in most instances, but using various switches and options, you can create a very specific scan and get exactly the results you're looking for.
  • NMap is easy to use. Even a new administrator will be able to use the graphical version (Zenmap) with efficiency right away.
Read full review
Rapid7
  • Being a vulnerability scanner tool, its purpose is to scan the systems to find the vulnerabilities. We can define the assets like IP address for the scans and it also allows to either schedule the scan at a preferred time or start the scan immediately. Upon completion of the scan, this tool can result provide the details like host type, OS information, hardware address, along with the vulnerabilities.
  • Rapid7 Nexpose has a list of templates to perform the scan. Once the templates are defined then the scans are performed accordingly.
  • It also contains an option to add credentials/authentication using passwords, usernames, private keys to perform the credential-based scans which I think is a great feature.
Read full review
Cons
Open Source
  • exporting, There's a serious lack of ability to export the information in a readable format to present to VPs and such. I always find myself doing a lot of data massaging to get it in a pretty format
  • some scans can trigger sensitive IDS/IPS
  • SYN scans can be particularly aggressive and cause problems on remote systems.
Read full review
Rapid7
  • Frequent updates and console lockups.
  • A lot of issues with scans running long out of nowhere, causing resource issues for the next scans.
Read full review
Support Rating
Open Source
There is a very large support community and a robust selection of add-ons and scripts. Once you get the use down this is one of the most powerful tools and you can find anything you are looking for as far as examples on the web. While not having official support its not lacking by any means.
Read full review
Rapid7
I gave it a seven due to the functionality and general ease of use after the initial setup headaches, but compared to Qualys, Rapid7 Nexpose falls short on features and ease of use. Their support drags this rating down a point as well. I have gone weeks with no update on semi-critical issues and typically have to make call after call to get a semi-coherent response.
Read full review
Alternatives Considered
Open Source
Alternatives to Nmap (other IP scanners) are often much more limited in what they can do; They often only allow you to scan a specific subset of ports or a limited number of IP addresses in one command. Nmap is unrestricted in that regard. What makes Nmap stand out above the rest, is the complete network analysis package you get with it. It allows IP scanner, network deep-dives, hardware analysis, vulnerability analysis, encryption detailing, and so much more, in one free application
Read full review
Rapid7
Nessus Pro does scans, but does not maintain an inventory from scan to scan. There is no history for a specific device, you have to look inside the results of each scan. Search across inventory is non-existent. There are no dashboards for data analysis. This is no tracking for remediation
Read full review
Return on Investment
Open Source
  • Nmap with Wireshark is free, so it's been a great combo team to gather info and test.
  • It's allowed us to avoid fines from false positives and to fix actual issues ourselves.
  • Great for finding hosts, helps keep the network secure.
Read full review
Rapid7
  • Can reduce time to patch most critical vulnerabilities
  • Can help to identify who is spending time patching things of lower risk thus keeping the organization in a more vulnerable position
  • Easily provides the patch team with a work plan to enhance security more quickly
Read full review
ScreenShots