Try our new research platform with insights from 80,000+ expert users

Digital Shadows vs Rapid7 InsightVM comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Digital Shadows
Average Rating
6.6
Reviews Sentiment
5.5
Number of Reviews
2
Ranking in other categories
Digital Risk Protection (7th)
Rapid7 InsightVM
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
66
Ranking in other categories
Vulnerability Management (9th), Risk-Based Vulnerability Management (4th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Digital Shadows is designed for Digital Risk Protection and holds a mindshare of 4.5%, down 7.3% compared to last year.
Rapid7 InsightVM, on the other hand, focuses on Risk-Based Vulnerability Management, holds 10.5% mindshare, down 13.5% since last year.
Digital Risk Protection Mindshare Distribution
ProductMindshare (%)
Digital Shadows4.5%
ZeroFOX12.8%
Recorded Future12.5%
Other70.2%
Digital Risk Protection
Risk-Based Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Rapid7 InsightVM10.5%
Qualys VMDR12.1%
Tenable Security Center8.9%
Other68.5%
Risk-Based Vulnerability Management
 

Featured Reviews

DavidJones7 - PeerSpot reviewer
Head of Content at Pharmaflow
Has required additional context for alerts but supports monitoring impersonation and threat activity effectively
I do not rate Digital Shadows a nine or ten because there are many things that need improvement. The information we get is kind of generic. For instance, for impersonation, we don't have much detail on their history, when it was used or how it was misused. Those further details would be really helpful, but the information we receive is basic, such as when it was last registered and when it was updated, without more insight about the malicious factors. For basic support from Digital Shadows, my impression is that it is six to seven because many times we see duplications or bugs, and the quality of the alerts is not up to the mark. We have escalated many times, but we do not receive solid responses from them in terms of fixes. Digital Shadows should focus on the engineering side rather than the support aspect because support is there to help us get updates, but in terms of quick fixes, it is not as responsive. The need for improvement lies more with the engineering part in fixing issues, which is linked to support.
FL
Senior Manager - Pre-Sales at Trillium Information Security Systems
Offers robust compliance features but needs improved automation in remediation
The automation capability remediation needs improvement. The current process requires manually telling IT teams to remediate vulnerabilities, and then they update the status of these vulnerabilities in the platform. This basic feature that Rapid7 calls an automated remediation process is actually manual. We can update the status of vulnerabilities in the Rapid7 InsightVM platform and collectively see how many vulnerabilities we have identified and how many are remediated by our IT team. More automation in the remediation feature is a basic demand from many customers. The remediation part and vulnerability identification of network devices or rigid devices are not currently supported by Rapid7 InsightVM. More integration and automation are the two areas Rapid7 needs to improve in their product.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most effective feature for threat intelligence, in my opinion, is collecting impersonating websites."
"Digital Shadows helps our organization identify and mitigate cyber threats through their crawling of the internet, gathering information, pivoting it, and then sending those alerts to us which we monitor from our SIEM tool."
"The most effective feature for threat intelligence, in my opinion, is collecting impersonating websites."
"NeXpose is a pretty good vulnerability scanner... There's a nice dashboard."
"Nexpose is one of the best solution on the market with very good development."
"The ease of deployment and configuration allows users to onboard quickly."
"The risk score that they provide makes it easier to find out the biggest risks. It helped the security officers to understand where the biggest risks are so that they can act on them. They can instruct their IT teams to give them a higher priority and mitigate them."
"The pricing is reasonable."
"most valuable features of Rapid7 InsightVM for me are creating dynamic asset tags, generating reports, and deploying the agent. The agent scans assets every four hours, providing real-time data on any devices. Although there weren't any significant new features compared to our previous tool, having both SIEM and vulnerability management handled by one tool made things easier. We could gather logs from different devices and cloud sources, and perform detailed investigations without switching tools. I haven't worked with the automation capabilities of InsightVM. For remediation prioritization, we check the vulnerability, search for solutions on open platforms, and work with different teams to apply patches after proper testing. Currently, we don’t have any AI or ASM projects assisted by InsightVM"
"I liked the dashboard on it. I could customize my dashboard with different widgets and different heat maps."
"The feature that I have found most valuable is its dashboards."
 

Cons

"The solution doesn't pick up all the brands of the URLs. I have a relatively small company name, however, the solution still misses a certain number of URLs with my company's name in it that are impersonating websites. It's not very comprehensive, to be honest."
"For basic support from Digital Shadows, my impression is that it is six to seven because many times we see duplications or bugs, and the quality of the alerts is not up to the mark."
"The solution doesn't pick up all the brands of the URLs."
"They should improve the cybersecurity feature of the solution."
"Technical support does not respond quickly."
"The on-premise updates could improve from Rapid7 InsightVM."
"There are not enough templates, and the reporting is weak with this solution."
"Patch management is the only missing feature I can think of. Rapid7 detects vulnerabilities, but it should also help you manage patches."
"Rapid7 InsightVM should improve its threat intelligence."
"Their customer support should be improved, and the effectiveness of scans also needs to be improved."
"The product does not have the capability to do dynamic scanning of non-web applications."
 

Pricing and Cost Advice

Information not available
"This solution is expensive, but it's fine for us as we have an open budget for security solutions. Protection and having the system secured is more important."
"The license is annual and this is the optimal approach when it comes to most software."
"Its pricing depends on the number of users per month."
"I do not have experience with the pricing of the solution."
"In some cases, we procure the licenses. In some cases, the customers directly buy the license from Rapid7."
"The price of the solution is less than the competitors."
"We have an annual license to use Rapid7 InsightVM and if we want to extend it, we will possibly choose more than one year."
"Its licensing is yearly. Everything is included in the price for one year."
report
Use our free recommendation engine to learn which Digital Risk Protection solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Manufacturing Company
9%
Engineering Company
6%
Computer Software Company
6%
Financial Services Firm
11%
Manufacturing Company
10%
Computer Software Company
8%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise14
Large Enterprise25
 

Questions from the Community

What is your experience regarding pricing and costs for Digital Shadows?
Regarding the cost of Digital Shadows, I think prices are a bit higher. The information provided is already available; some of it is paid information. However, considering all the information they ...
What needs improvement with Digital Shadows?
I do not rate Digital Shadows a nine or ten because there are many things that need improvement. The information we get is kind of generic. For instance, for impersonation, we don't have much detai...
What is your primary use case for Digital Shadows?
Our main use cases for Digital Shadows are mainly using it for threat intel. For instance, we have our domain listed on Digital Shadows. Whenever we see any sort of impersonation domain registratio...
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. You can easily prioritize vulnerabilities using attacker analytics. Overall, Rapid...
What do you like most about Rapid7 InsightVM?
The product's initial setup phase was very easy.
What is your experience regarding pricing and costs for Rapid7 InsightVM?
My experience with the pricing, setup cost, and licensing is that both the setup cost and licensing are great.
 

Also Known As

No data available
InsightVM, NeXpose
 

Overview

 

Sample Customers

Accenture, Pret A Manger, Human Rights Watch
ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
Find out what your peers are saying about ZeroFOX, Recorded Future, Proofpoint and others in Digital Risk Protection. Updated: March 2026.
884,873 professionals have used our research since 2012.