Likelihood to Recommend Rapid7 InsightVM is perfect for a scenario where IT admin or CISO wants to scan its infrastructure to be sure that there is no vulnerability that could be exploited from outside or inside the company. It also could be used to automate patching and dealing with vulnerabilities. It's also adapted for users that need cloud security management
Read full review For any customer that has a complex network environment spanning globally, skybox helps manage firewall policy compliance for many vendors quite easy. It has a variety of security and network vendors that it is compatible with in its database.
Read full review Pros Being a vulnerability scanner tool, its purpose is to scan the systems to find the vulnerabilities. We can define the assets like IP address for the scans and it also allows to either schedule the scan at a preferred time or start the scan immediately. Upon completion of the scan, this tool can result provide the details like host type, OS information, hardware address, along with the vulnerabilities. Rapid7 Nexpose has a list of templates to perform the scan. Once the templates are defined then the scans are performed accordingly. It also contains an option to add credentials/authentication using passwords, usernames, private keys to perform the credential-based scans which I think is a great feature. Read full review Skybox manages compliance for firewalls better than we have seen with other tools. Skybox integrates into standard change management tools so change control can flow through Skybox and assist with all decisions to implement a change. The Skybox network map is more detailed than other management tools showing us paths other tools didn't find. Read full review Cons In comparison to Tenable SecurityCenter we saw it didn't exactly find the same vulnerabilities which we would assume it should have We rely on a ticketing system and not our VM tool to assign tasks so wasn't too useful having that in there Filtering capabilities aren't as good as its competitors Read full review User experience. On the first approach, it's not the simplest tool that I have ever used. Web-based console. In my honest opinion it's very important [to have] this type of functionality to extend the use of Skybox. Too many updates of the product. Read full review Usability It is user friendly and quite easy to use. It centralizes all info in one portal and generates good reports to help you visualize and assess your change management decision
Read full review Support Rating I gave it a seven due to the functionality and general ease of use after the initial setup headaches, but compared to Qualys, Rapid7 Nexpose falls short on features and ease of use. Their support drags this rating down a point as well. I have gone weeks with no update on semi-critical issues and typically have to make call after call to get a semi-coherent response.
Read full review The support team needs to be improved especially in their response and awareness about recent bugs in their solution. For example, sometimes they are not aware about how to integrate specific vendors like Microsoft Azure and they still don't have answers to it until now.
Read full review Alternatives Considered Nessus Pro does scans, but does not maintain an inventory from scan to scan. There is no history for a specific device, you have to look inside the results of each scan. Search across inventory is non-existent. There are no dashboards for data analysis. This is no tracking for remediation
Read full review Read full review Return on Investment Can reduce time to patch most critical vulnerabilities Can help to identify who is spending time patching things of lower risk thus keeping the organization in a more vulnerable position Easily provides the patch team with a work plan to enhance security more quickly Read full review Overall ROI is good as this product is an augmentation for us but we already have a mature security program with an experienced security team so the ROI is high. Read full review ScreenShots