Rapid7 InsightVM review

InsightVM is a long-standing enterprise scanner, but Rapid7 now sells it inside Exposure Command, which lowers its value score here. Exposure Command Essentials combines InsightVM with attack surface management and lists hybrid scanning, continuous agent visibility, real-time detection, risk-based prioritization, remediation projects and SLAs, policy and compliance checks, and correlation of third-party findings. Exposure Command Ultimate adds multi-cloud visibility across AWS, Azure, GCP and Kubernetes, container assessment, infrastructure-as-code scanning and dynamic application security testing. Rapid7 says prioritization weighs exploit likelihood, reachability, severity and business context, and the platform connects to more than 500 tools for ticketing, identity and EDR data. The tradeoff is buying complexity. There is no public price, existing InsightVM customers are told to speak to their account team about contract changes, and rollout takes more effort than SaaS scanners. It fits enterprises already using Rapid7 for detection and response.

Who it is for

Enterprises that want agent and scanner coverage of hybrid environments tied to attack surface management and remediation SLAs.

Price

See vendor pricing (USD check pending).

US price check pending. See the vendor pricing page.

Key features

• Hybrid environment scanning with continuous agent visibility
• Risk-based prioritization using exploit likelihood, reachability and business context
• Remediation projects and SLAs
• Policy and compliance checks
• 500+ integrations across cloud, identity, ITSM, EDR and CI/CD

Strengths and weaknesses

• Strength: Mature scanner with remediation project tracking
• Strength: Exposure Command Essentials adds attack surface management
• Strength: Ultimate tier adds cloud, container and DAST coverage
• Weakness: Sold only through Exposure Command packages on quote
• Weakness: Product changes may complicate existing InsightVM contracts
• Weakness: More setup work than lighter SaaS scanners

Key facts

• Packaging: Exposure Command Essentials or Ultimate
• Integrations: 500+
• Cloud coverage: AWS, Azure, GCP, Kubernetes on Ultimate
• Pricing: Quote only

Where it ranks

Rapid7 InsightVM is No. 9 in our Best Vulnerability Management Software verdict.