No more typing reviews! Try our Samantha, our new voice AI agent.

Cloudify vs Rapid7 InsightCloudSec comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 17, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudify
Ranking in Cloud Management
41st
Average Rating
8.0
Reviews Sentiment
7.2
Number of Reviews
12
Ranking in other categories
No ranking in other categories
Rapid7 InsightCloudSec
Ranking in Cloud Management
18th
Average Rating
7.8
Reviews Sentiment
6.3
Number of Reviews
13
Ranking in other categories
Cloud Security Posture Management (CSPM) (19th), Cloud-Native Application Protection Platforms (CNAPP) (16th), AI Observability (13th)
 

Mindshare comparison

As of August 2026, in the Cloud Management category, the mindshare of Cloudify is 1.4%, down from 1.9% compared to the previous year. The mindshare of Rapid7 InsightCloudSec is 1.0%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Management Mindshare Distribution
ProductMindshare (%)
Rapid7 InsightCloudSec1.0%
Cloudify1.4%
Other97.6%
Cloud Management
 

Featured Reviews

Mark Wittling - PeerSpot reviewer
Cloud Architect at Cox communications
Works very well for advanced service chaining requirements and has extremely advanced engineers for support
We had a manager who thought that Cloudify could be used as a replacement for Horizon in OpenStack, but we found that Cloudify lacked the user interface or GUI for doing multitenancy and basic platform management tasks. Cloudify was really good at launching, for example, firewalls and configuring them and doing service chaining and rather advanced things like that, but it didn't meet the requirements for a basic platform management solution. It is something that seems to work better as a bolt-on or an augmented solution. It is a bit mis-marketed as a Cloud Management solution. It is not that. It is more of a service orchestration and automation tool. It is very good at doing that, but it fails to meet basic platform management requirements. Once you have it running, you can't really do anything with it without writing code and scripts. It requires a full-time DevOps person to use it. We deployed a Palo Alto firewall with it. That's basically what the project was for us, and it worked flawlessly once we got it finished, but it took another 12 weeks to get all of the automation and everything else coded, tested, and working. There is certainly a place for this technology, but when we got rid of OpenStack and moved to VMware, we either had to go with the vRealize Automation Suite to do this kind of automation, or we had to find an alternative solution to manage the private cloud. So, we put Cloudify in, but we really couldn't find it useful for basic platform administration tasks.
Arun Babu - PeerSpot reviewer
SOC analyst at a media company with 1,001-5,000 employees
Daily endpoint monitoring has improved investigations and saved time but detection rules still need tuning
It is important to note that Rapid7 InsightCloudSec's features are not 100% precise, but I find about 70% of the time it is satisfactory. I would like to suggest that you improve it to be more precise, ideally making it 100% if possible. Some cases in Rapid7 InsightCloudSec indicate that the log is not enough, as they mostly just generate alerts, and the synchronization between data connectors is often problematic, particularly in terms of not being in sync always, especially between the AD and Rapid7 alerts, which generates numerous false positives. Additionally, the traditional rules should be updated, as this is a main point worth mentioning since we spend a lot of time fine-tuning these traditional rules. I suggest improving the legacy detection rules. If there are any authentication cases, such as impossible travel activity where a user has their SharePoint hosted in a different location, Rapid7 can often trigger alerts, creating confusion as we cannot fine-tune it properly. Another issue is with honeypot access. We sometimes lack necessary logs because Defender's advanced threat protection scanning gets detected as honeypot activity by Rapid7, leading to annoying and noisy alerts that we need to constantly close. If you can improve the traditional detection rules to reflect current detection rules, it would make it significantly easier for us to manage, as we constantly need to check legacy rules to update or possibly turn them off. Updating the legacy rules should be a priority.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's easy to create a cloud server, such as Linux with JBoss or WebSphere, which is good for continuous deployment."
"Extensible internal functions and plugins. Can implement custom plugins to fit your scenario. Python based plugins."
"Cloudify works in cases where you have very advanced service chaining requirements. It really works well there, and it fits the best. They have a standardized markup that's based on TOSCA, which is a standard. I like the fact that they're standards-based. Their solution works extremely well if you have the talent and the manpower to write TOSCA descriptors to deploy and interchange services or to automate the configuration and turn up of services."
"We have found that this is not an undue burden, and the extra work gives immense flexibility and portability."
"The solution includes the option to run background scripts and processes from a connected API."
"We have been able to realize ROI for our customers in the form of reduced cost, higher top line and increased valuation through improved profitability."
"This is a somewhat complex solution for very complex use cases where there are multiple cloud vendors, multiple infrastructures, and multiple configurations."
"Cloudify provides the infrastructure-as-code, as well as operational action capabilities (orchestrated startups or upgrades, and more)."
"The best features Rapid7 InsightCloudSec offers include more automation remediation, compliance reporting for auditing, improvement on multi-cloud governance, and cost visibility, which really stand out to me."
"It runs every hour and has been reliable since I started."
"Since implementing Rapid7 InsightCloudSec, manual cloud security checks have been reduced by around forty to fifty percent, and mean time to resolve misconfigurations has dropped from several hours to under thirty minutes on average, significantly improving efficiency and client confidence."
"I can confirm money and time savings with Rapid7 InsightCloudSec, as we can scan the entire IP range simultaneously instead of manually checking each asset for vulnerabilities, reducing the need for technicians to move around the organization and thus saving significant time."
"Rapid7 InsightCloudSec impacts the organization positively by acting as a shield against hackers and ransomware, providing effective protection to data and infrastructure."
"Agentless scanning is a possible use with Rapid7 InsightCloudSec."
"The fastest scanning is the best feature Rapid7 InsightCloudSec offers, helping me respond to threats quickly in my daily operations."
"ICSE is cheaper compared to other tools and has a pleasant user experience with good support."
 

Cons

"Certainly the UI could use some intensive work, but nevertheless, overall, it’s a complete product with its 3.4 version and much better features are available with 4.0."
"Error handling could be improved; GUI is lacking with respect to user privileges and connectivity."
"The solution is a bit of a headache because mistakes happen in the blueprint every time we deploy and they require modifications."
"Cloudify is not a turn-key solution, nor designed as such."
"More of the debug functionality is needed; hopefully, we can pause during the server building process."
"It lacked the user interface for multitenancy and basic platform management tasks. It is a leader in the niche area that they like to perform in, but it only does about 30% of top-tier advanced functions of platform management. It doesn't meet about 70% of what you need to manage a private cloud platform."
"We'd like to see the maturity of the plugins continue, including Amazon EMR and others."
"It lacked the user interface for multitenancy and basic platform management tasks."
"There are a lot of other solutions in the market, not only providing the features of a CSPM, but also CNAPP."
"I would say that because Rapid7 InsightCloudSec does not have automatic patching capabilities, it provides recommendations, but it does not execute anything from within Rapid7 InsightCloudSec."
"Technical support could be better. It could also be easier, more user-friendly, and intuitive. The API keys aren't easy to understand, and the cloud layouts aren't intuitive and user-friendly. We should be able to integrate IM governance and APIs into non-compliant workloads like legacy solutions."
"I'm not impressed with their support right now. Their support model is not really good."
"For a first-time user who starts using Rapid7 InsightCloudSec, it is somewhat complicated to navigate through the UI and search for logs or vulnerabilities, so this is one aspect that could be improved."
"Rapid7 InsightCloudSec needs to provide more granular search capabilities, such as the ability to search back the last three months."
"Rapid7 InsightCloudSec could be better at showing dashboards for virtual firewalls and appliances. Compared to other solutions like Palo Alto, this area is not as good. So, they should work on improving this for virtual devices."
"A couple of modules are missing when compared to other providers, specifically related to some IAM, and the login piece needs improvement."
 

Pricing and Cost Advice

"I wasn't involved in the pricing of it because we were just doing prototype work with it, but I was told by the upper management team that it was quite expensive. That was another reason we switched to Morpheus."
"We're doing an annual subscription. There are additional expenses, but not within the confines of this platform."
"Companies generally buy this tool because the pricing is not that high."
report
Use our free recommendation engine to learn which Cloud Management solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
15%
Construction Company
14%
Comms Service Provider
11%
Financial Services Firm
9%
Financial Services Firm
9%
Comms Service Provider
9%
Manufacturing Company
9%
Construction Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Large Enterprise6
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise4
Large Enterprise8
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for Rapid7 InsightCloudSec?
The pricing, setup cost, and licensing for Rapid7 InsightCloudSec are reasonable, and since our organization is growing, I have observed that the more numbers you have, the less costly the product ...
What needs improvement with Rapid7 InsightCloudSec?
I would say that because Rapid7 InsightCloudSec does not have automatic patching capabilities, it provides recommendations, but it does not execute anything from within Rapid7 InsightCloudSec. It h...
What is your primary use case for Rapid7 InsightCloudSec?
In my role, my main use case for Rapid7 InsightCloudSec is for vulnerability management, where I scan my machines to see zero-day vulnerabilities and receive remediation tactics recommended by Rapi...
 

Also Known As

No data available
DivvyCloud
 

Overview

 

Sample Customers

Proximus Partner Communications (Israel) VMware NTT Data Metaswitch Spirent Communications Lumina Networks Atos Fortinet
Fannie Mae, 3M, PizzaHut, Spotify, Autodesk, Discovery
Find out what your peers are saying about Cloudify vs. Rapid7 InsightCloudSec and other solutions. Updated: August 2026.
908,800 professionals have used our research since 2012.