

Find out in this report how the two Vulnerability Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
I have seen a return on investment with Rapid7 InsightVM as we have reduced security incidents because we are informed about our critical vulnerabilities, allowing us to remain on the safe side against critical attacks.
There was a specific issue that our other security tooling did not pick up, but XM Cyber did.
It's reduced the timescale to remediate vulnerabilities that are identified as representing a high risk.
Support is not available promptly, especially when issues are escalated to another region.
Sometimes support requests coincide with holidays in their support region, causing slight delays.
I cannot comment specifically regarding the support part because I have never needed Rapid7 support for the InsightVM solution as it is very stable.
The customer support is fantastic; it's probably some of the best we've received across all our security vendors.
Customer support for XM Cyber is good, responsive, and it follows up on issues.
Scalability in the Rapid7 InsightVM solution is straightforward.
Rapid7 InsightVM is recommended for large-scale companies with more than 30,000 users.
According to the environment requirements, we can scale the solution as needed.
Its scalability is great; it's easy to deploy and fully scalable.
We have not experienced any issues with scalability or reached its limits.
We have not faced any issues with stability, and I would rate it a nine out of ten.
The stability of Rapid7 InsightVM is excellent.
There have been some challenges, especially with support response times, which affect stability.
We have quite a complex and large IT estate, and we've certainly experienced no limitations or problems arising from the ability of XM Cyber's product to scale across that estate.
Having the ability to build our own audit file, similar to a feature in Tenable, would be beneficial.
The major improvement needed is prompt support.
The current process requires manually telling IT teams to remediate vulnerabilities, and then they update the status of these vulnerabilities in the platform.
We push the boundaries with digital twins; I understand XM Cyber uses a similar concept of graph databases to map environments.
They could improve support because when we need to create a super case and escalate to resolve with technical support, they resolve our ticket in approximately two weeks.
The part that can be improved is the mobile exposure and the IBM i specific equipment.
Rapid7 InsightVM is expensive, possibly one of the highest in pricing among similar products.
Pricing is reasonable and competitive compared to other solutions in the market.
I would rate the pricing for Rapid7 InsightVM as eight out of ten.
We have a large, complicated estate, and in the licensing discussions, we were keen not to have the cost balloon because of the complication, the number of PCs and servers that we have.
It's based on the CVSS risk scoring system, which is well-recognized and effective.
The dashboard is excellent as it helps in visualizing our vulnerability management data.
I have seen a decrease in the number of incidents since adopting Rapid7 InsightVM, and the team can engage faster with incidents because we already know about the vulnerability on the servers.
Our loss exposure amount has reduced significantly, leading to two big wins: our loss exposure amount has gone down, and we have direct savings from focusing our team's time on what's important, allowing them to work on other business benefits and generate value for the company.
By far, the best feature of XM Cyber is being able to map out the way vulnerabilities can be exploited based on what they call the choke points in the network where the path that a bad actor would take comes closest to assets within our environment that are most vulnerable but also most valuable.
XM Cyber allows us to quantify the risk, and we are able to track remediation, so we can quantify the risk at an executive level and also to a technical IT team.
| Product | Market Share (%) |
|---|---|
| Rapid7 InsightVM | 2.7% |
| XM Cyber | 1.0% |
| Other | 96.3% |

| Company Size | Count |
|---|---|
| Small Business | 29 |
| Midsize Enterprise | 14 |
| Large Enterprise | 25 |
Rapid7 InsightVM is a comprehensive vulnerability management platform that protects your systems from attackers and is easy to scale. The solution provides easy access to vulnerability management, application security, detection and response, external threat intelligence, orchestration and automation, and more. Rapid7 InsightVM is ideal for security, IT, and DevOps teams, helping them reduce risk by enabling them to detect and respond to attacks quickly.
Rapid7 InsightVM Features
Rapid7 InsightVM has many valuable key features. Some of the most useful ones include:
Rapid7 InsightVM Benefits
There are many benefits to implementing Rapid7 InsightVM. Some of the biggest advantages the solution offers include:
Reviews from Real Users
Below are some reviews and helpful feedback written by PeerSpot users currently using the Rapid7 InsightVM solution.
An owner at a tech services company says, "I liked the dashboard on it. I could customize my dashboard with different widgets and different heat maps."
PeerSpot user Kimeang S., Technical Consultant at Yip Intsoi, mentions, "The most important aspect of the solution is that it rarely gives false positives, especially compared to other products. It provides very clear reports for our IT teams to look at."
A Director of Information Technology at a government explains, "The main functionality of identifying item endpoints that weren't properly patched or had vulnerabilities is the solution's most valuable feature."
XM Cyber is a leading hybrid cloud security company that’s changing the way innovative organizations approach cyber risk. Our attack path management platform continuously uncovers hidden attack paths to your critical assets across cloud and on-prem environments, so you can cut them off at key junctures and eradicate risk with a fraction of the effort. This overcomes the big disconnect that security teams experience when they’re presented with endless alerts, yet can’t see which exposures impact risk the most, how they come together to be exploited by an attacker, or how to efficiently eliminate them. This approach is a complete game-changer, which is why some of the world’s largest, most complex organizations choose XM Cyber to help eradicate risk. Founded by top executives from the Israeli cyber intelligence community, XM Cyber has offices in North America, Europe, and Israel.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.