TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Qualys VMDR

    Score9.3 out of 10
    N/AQualys VMDR 2.0 with TruRisk gives enterprises visibility and insight into cyber risk exposure with the goal of making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure its true risk, and track risk reduction over time.N/A

    Rapid7 InsightVM

    Score7.9 out of 10
    N/AInsightVM is presented as the next evolution of Nexpose, by Rapid7. This Insight cloud-based solution features everything included in Nexpose, such as Adaptive Security and the proprietary Real Risk score, and extends visibility into cloud and containerized infrastructure. InsightVM also offers advanced remediation, tracking, and reporting capabilities not included in Nexpose.

    $19

    per GB

    Pricing
    Qualys VMDRRapid7 InsightVM
    Editions & Modules
    No answers on this topic
    Log Management
    $19
    per GB
    Vulnerability Management
    $22
    per asset
    insightIDR
    $52
    per asset
    Application Security
    $2,000
    per app
    insignConnect
    Contact sales team
    Offerings
    Pricing Offerings
    Qualys VMDRRapid7 InsightVM
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details
    More Pricing Information
    Community Pulse
    Qualys VMDRRapid7 InsightVM
    Considered Both Products
    Qualys
    Chose Qualys VMDR
    Qualys is quite user friendly and gives more easy information related to asset and risk an asset possess. Plus high quality of support as well as ease of use. Qualys is single suite for multiple task for your organization like VMDR rather than using multiple tools for different …
    Incentivized
    Rapid7
    Chose Rapid7 InsightVM
    Product functionality and performance
    Financial/organizational viability
    Product roadmap and future vision
    Incentivized
    Key User Insights
    Would buy again
    86%
    Would buy again
    6 Answers
    89%
    Would buy again
    8 Answers
    Delivers good value for the price
    100%
    Delivers good value for the price
    6 Answers
    100%
    Delivers good value for the price
    8 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    7 Answers
    89%
    Happy with the feature set
    8 Answers
    Lived up to sales and marketing promises
    100%
    Lived up to sales and marketing promises
    6 Answers
    86%
    Lived up to sales and marketing promises
    6 Answers
    Implementation went as expected
    100%
    Implementation went as expected
    6 Answers
    86%
    Implementation went as expected
    6 Answers
    Features
    Qualys VMDRRapid7 InsightVM
    Threat Intelligence
    Comparison of Threat Intelligence features of Qualys VMDR and Rapid7 InsightVM
    Feature
    Qualys VMDR
    8.4
    7 Ratings
    4% above category average
    Rapid7 InsightVM
    7.4
    6 Ratings
    9% below category average
    Network Analytics7.47 Ratings5.36 Ratings
    Threat Recognition8.07 Ratings7.06 Ratings
    Vulnerability Classification9.67 Ratings9.36 Ratings
    Automated Alerts and Reporting9.27 Ratings9.36 Ratings
    Threat Analysis8.67 Ratings7.46 Ratings
    Threat Intelligence Reporting8.07 Ratings7.05 Ratings
    Automated Threat Identification8.07 Ratings6.76 Ratings
    Vulnerability Management Tools
    Comparison of Vulnerability Management Tools features of Qualys VMDR and Rapid7 InsightVM
    Feature
    Qualys VMDR
    8.8
    7 Ratings
    6% above category average
    Rapid7 InsightVM
    8.3
    6 Ratings
    0% below category average
    IT Asset Realization9.07 Ratings9.06 Ratings
    Authentication8.47 Ratings8.66 Ratings
    Configuration Monitoring9.07 Ratings8.66 Ratings
    Web Scanning8.66 Ratings7.05 Ratings
    Vulnerability Intelligence9.27 Ratings8.36 Ratings
    Best Alternatives
    Qualys VMDRRapid7 InsightVM
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    Tenable Nessus
    Score8.8 out of 10
    Tenable Nessus
    Score8.8 out of 10
    Enterprises
    Tenable Vulnerability Management
    Score8.9 out of 10
    Tenable Vulnerability Management
    Score8.9 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Qualys VMDRRapid7 InsightVM
    Likelihood to Recommend
    9.6
    (7 ratings)
    9.0
    (13 ratings)
    Likelihood to Renew
    10.0
    (1 ratings)
    -
    (0 ratings)
    Usability
    8.4
    (2 ratings)
    9.0
    (3 ratings)
    Availability
    10.0
    (1 ratings)
    -
    (0 ratings)
    Performance
    9.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    8.0
    (2 ratings)
    7.2
    (2 ratings)
    Implementation Rating
    9.0
    (1 ratings)
    -
    (0 ratings)
    Configurability
    9.0
    (1 ratings)
    -
    (0 ratings)
    Contract Terms and Pricing Model
    9.0
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    9.0
    (1 ratings)
    -
    (0 ratings)
    Product Scalability
    9.0
    (1 ratings)
    -
    (0 ratings)
    Vendor post-sale
    8.0
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    8.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Qualys VMDRRapid7 InsightVM
    Likelihood to Recommend
    Qualys
    Qualys VMDR is best suited for larger companies with a very large IT asset footprint. Qualys VMDR is not suited for businesses that are small and upcoming as the price for the tool is very expensive and could be a budget sink if not used properly. In our organization we use the Qualys VMDR dashboard and reporting in order to collect any vulnerabilities we miss during our routine audits to ensure that our environment is stable and protected for attacks.
    Incentivized
    Read full review
    Rapid7
    InsightVM is great for finding all devices on your network and where the misconfigurations exist. We all have to patch our systems and applications, but it can be difficult to keep track of which systems are up to date. This tool is very helpful in filling in this gap and helping you organize that information. It is easy to get a big picture view of how your organization is doing from a vulnerability perspective, and it is equally as easy to drill down and get specific details that you need. Prioritization is crucial when it comes to this space, because you can never address every vulnerability, so you need to make sure the highest priority items are being remediated. R7's tool excels in this area and highlights items you weren't even aware of.
    Incentivized
    Read full review
    Pros
    Qualys
    • Seamless reporting across the different widgets (i.e. TruRisk)
    • DEEP-DIVE into an asset's info/vulns
    • Baked-in PCI ASV scans that a Qualys QSA can approve
    Incentivized
    Read full review
    Rapid7
    • Rapid7 InsightVM is good at agentless scanning.
    • Rapid7 InsightVM integration with ServiceNow works very well.
    • Rapid7 InsightVM scales very well with deploying scan engines. It can be used in large organizations.
    • The user interface of Rapid7 InsightVM is very intuitive and user friendly. It is easy to use.
    Incentivized
    Read full review
    Cons
    Qualys
    • Qualys VMDR can definitely improve on its reporting of assets as we have caught devices not captured in the Qualys VMDR scans.
    • We would like to see an improvement on the dashboard interface as it is faulty sometimes.
    • Qualys VMDR should focus on more competitive pricing as it is very expensive.
    Incentivized
    Read full review
    Rapid7
    • From my experience of using this tool, sometimes it gives more false positives. A few times I had performed the scan on the same IP address using QualysGuard and Nexpose, but after comparing the scan results I had found that QualysGuard had provided more accurate vulnerability information.
    Incentivized
    Read full review
    Likelihood to Renew
    Qualys
    Next to Veeam (which is a tremendous product for backup/DR) this is the best service/software I have used in the past three decades. Should be called the Swiss Army Knife of security.
    Incentivized
    Read full review
    Rapid7
    No answers on this topic
    Usability
    Qualys
    infrastructure to identify vulnerabilities
    Read full review
    Rapid7
    While I think it is a great tool and platform, I believe it (like all tools and solutions) is always evolving and the needs for clients are changing as the industry evolves and threats are upgraded. Cost is good, and support is helpful. Some things could be more granular and others could be easier to understand
    Incentivized
    Read full review
    Reliability and Availability
    Qualys
    Always available with the exception on maint windows
    Incentivized
    Read full review
    Rapid7
    No answers on this topic
    Performance
    Qualys
    Once in a while it would be slow -
    Incentivized
    Read full review
    Rapid7
    No answers on this topic
    Support Rating
    Qualys
    This is iron but I am giving it 5 star and I can give more If I can do because they are best in support. So once you own this product they will assign a dedicated support for you and when you are under the weather with anything just connect them with anything call, ping or ticket they will come like Genie.
    Read full review
    Rapid7
    I gave it a seven due to the functionality and general ease of use after the initial setup headaches, but compared to Qualys, Rapid7 Nexpose falls short on features and ease of use. Their support drags this rating down a point as well. I have gone weeks with no update on semi-critical issues and typically have to make call after call to get a semi-coherent response.
    Incentivized
    Read full review
    Implementation Rating
    Qualys
    Not really - the integrations via connectors is not heavy lifting. Any complexity has to do with a service that requires more steps (i.e. AWS/GCP)
    Incentivized
    Read full review
    Rapid7
    No answers on this topic
    Alternatives Considered
    Qualys
    It is a very similar tool but Qualys VMDR is much better when it comes to reporting and solutions provided. Asset management is really good in Qualys VMDR. Qualys VMDR support is really quick , you can get a TPM if you run into any issues. Qualys VMDR has wide variety of scanning options which lacks in tenable.
    Incentivized
    Read full review
    Rapid7
    Rapid7 InsightVM is a more professional tool than Nessus because historically, it was based on metasploit which is a powerful pentesting and exploiting tool. InsightVM covers more attacking scenarios and vulnerabilities than competitors and still a leader in this domain.cloud capability is also not available forNesuus and some other products. Rapid7 InsightVM is a way better as a pentesting tool in my opinion
    Incentivized
    Read full review
    Contract Terms and Pricing Model
    Qualys
    MOSTLY good - but as noted having all features purchased on portal only - nothing that is not purchased.
    Incentivized
    Read full review
    Rapid7
    No answers on this topic
    Scalability
    Qualys
    Outside some pretty arcane apps or OS this is painless. The problem - and self-inflicted - is that older stuff is not supported.
    Incentivized
    Read full review
    Rapid7
    No answers on this topic
    Return on Investment
    Qualys
    • Cut down on manual efforts to investigate or remediate vulnerabilities, which can be a big driver of ROI
    • Avoidance of potential incidents with upfront risk mitigation
    • Patching efficiency gains
    Incentivized
    Read full review
    Rapid7
    • After spending 2 years configuring, tuning, troubleshooting, and ultimately having nothing but regrets, we migrated away from the tool and accepted the loss.
    • Support had a variety of opinions, none of them consistent. No best practices. Lots of secret tricks known by support, none documented or shared until after problems are found.
    • Consulting services are available to come out and do a health check of your deployment, for a fee.
    Incentivized
    Read full review
    ScreenShots