Likelihood to Recommend Rapid7 InsightVM is perfect for a scenario where IT admin or CISO wants to scan its infrastructure to be sure that there is no vulnerability that could be exploited from outside or inside the company. It also could be used to automate patching and dealing with vulnerabilities. It's also adapted for users that need cloud security management
Read full review Ventiv IRM works great for companies with a large number of sources of data, record management, and reporting needs. The system will be able to handle multiple users, processes, or other functions that a large company may need. Ventiv IRM would not be a good fit for companies that may not be large enough to justify the cost of a powerful platform like IRM.
Read full review Pros Being a vulnerability scanner tool, its purpose is to scan the systems to find the vulnerabilities. We can define the assets like IP address for the scans and it also allows to either schedule the scan at a preferred time or start the scan immediately. Upon completion of the scan, this tool can result provide the details like host type, OS information, hardware address, along with the vulnerabilities. Rapid7 Nexpose has a list of templates to perform the scan. Once the templates are defined then the scans are performed accordingly. It also contains an option to add credentials/authentication using passwords, usernames, private keys to perform the credential-based scans which I think is a great feature. Read full review Support Portal allows direct access to support tickets, their status, and having programmers/developers reach out directly to me to clarify my requests. Taking a big project and putting it into smaller, measurable pieces that move the project from beginning to end. Read full review Cons In comparison to Tenable SecurityCenter we saw it didn't exactly find the same vulnerabilities which we would assume it should have We rely on a ticketing system and not our VM tool to assign tasks so wasn't too useful having that in there Filtering capabilities aren't as good as its competitors Read full review Setting up a new Advance Query report - sometimes I run into glitches When creating/implementing a match merge, the two claims that are set to merge, need to be typed EXACTLY the same (UPPERCASE & lowercase matching on both, if one is all caps and the other is lowercase, the match merge is not successful) I do wish there was a way to self-match two claims instead of waiting for the match merge. Read full review Usability Very usable. The team is always suggesting "tweaks" that allow for easier flow, better understanding of the information needed. This even includes in moving categories/sections in a records around so that the flow of the record is better
Read full review Support Rating I gave it a seven due to the functionality and general ease of use after the initial setup headaches, but compared to Qualys, Rapid7 Nexpose falls short on features and ease of use. Their support drags this rating down a point as well. I have gone weeks with no update on semi-critical issues and typically have to make call after call to get a semi-coherent response.
Read full review Support will reach out to me and I LOVE that. Often I want to show them what I see and they have always been willing to jump on a Teams meeting so I can do that. This has also helped me understand how to explain things better (support speak). This has led to closing tickets, completing projects sooner.
Read full review Implementation Rating The actual implantation was not good. The system is fully customizable so Ventiv was ready to give us what we wanted; however, we never had a system so we didn't fully understand what we wanted. Since then, we hit "reset" and we are steadily moving forward.
Read full review Alternatives Considered Nessus Pro does scans, but does not maintain an inventory from scan to scan. There is no history for a specific device, you have to look inside the results of each scan. Search across inventory is non-existent. There are no dashboards for data analysis. This is no tracking for remediation
Read full review While Ventiv IRM is a bit more expensive than another platform we have used and evaluated, we get a lot of value that helps us make informed risk management decisions. The system works for us, and not the other way around. We're able to use integrations from other sources (such as Navex for reporting and our TPA, and Gallagher-Bassett for financial claim information). The system is easy to use, update, and manage, which is helpful too.
Read full review Return on Investment Can reduce time to patch most critical vulnerabilities Can help to identify who is spending time patching things of lower risk thus keeping the organization in a more vulnerable position Easily provides the patch team with a work plan to enhance security more quickly Read full review OSHA reports are easier to run they were in our former software, Riskmaster We don't utilized IRM as much as CE so are still finding ways to improve Read full review ScreenShots