No more typing reviews! Try our Samantha, our new voice AI agent.
Rapid7 Metasploit Logo

Rapid7 Metasploit pros and cons

Vendor: Rapid7
4.0 out of 5

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Rapid7 Metasploit is essential for proficient penetration testing and offers comprehensive features for exploitation and scanning.
It provides valuable support for generating phishing emails and testing Linux-based web server components.
The platform includes almost all available exploits and payloads, making it a versatile tool for targeted penetration tests.
Rapid7 Metasploit is scalable and aligns well with user needs, offering automation capabilities with the professional edition.
The technical support for Rapid7 Metasploit is helpful and responsive, further enhancing its utility for penetration testing.

CONS

The initial setup for the open-source version was a bit "tweaky."
Metasploit cannot be installed on a machine with antivirus software.
The reporting feature needs improvement, with time-consuming report fetching.
The database is not always updated with the latest vulnerabilities or zero-day exploits.
Support needs improvement, especially for non-security users.
 

Rapid7 Metasploit Pros review quotes

Mani Bommisetty - PeerSpot reviewer
Infrastructure patching Manager at a manufacturing company with 1,001-5,000 employees
Dec 17, 2024
Rapid7 has a significant advantage in providing a clear picture of my environment.
NW
Senior Security Consultant at ITSEC Asia
Feb 21, 2025
When I compare Metasploit with Nessus, I find that Metasploit is faster and it does not burden the system as much.
MuhammadMurtaza - PeerSpot reviewer
Information security engineer at Cyberisk
Nov 11, 2024
The most valuable features of Metasploit include its powerful capabilities for exploitation and scanning.
Learn what your peers think about Rapid7 Metasploit. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,221 professionals have used our research since 2012.
Md. Shahriar Hussain - PeerSpot reviewer
Information Security Analyst at Banglalink
Feb 23, 2024
The tool's most useful feature for penetration testing is its automation capabilities. With the professional edition, you can upload the results from Nessus in the Rapid7 Metasploit solution portal.
Andrei Bigdan - PeerSpot reviewer
Executive Manager at B2B-Solutions LLC
Nov 7, 2023
It allows us to concentrate solely on identified vulnerabilities without the hassle of additional setup.
AdeelAgha - PeerSpot reviewer
Team Lead - Cyber Security & Compliance at Al Tuwairqi Group
Mar 3, 2023
The greatest advantage of Rapid7 Metasploit is that it is the only system that can directly exploit vulnerabilities on the Metasploit platform.
reviewer2295975 - PeerSpot reviewer
Senior cybersecurity engineer at a aerospace/defense firm with 5,001-10,000 employees
Nov 20, 2023
It is scalable. It's in line with our needs.
reviewer1675638 - PeerSpot reviewer
Cyber Security Director at a manufacturing company with 5,001-10,000 employees
Jun 9, 2023
I don't have any other tools like it, and I always use it when I'm doing a pen test. Metasploit is a great solution for penetration testing,
Agustinus DWIJOKO - PeerSpot reviewer
Network & Security Engineer at PT. Centrin Online Prima
May 12, 2022
Technical support has been helpful and responsive.
Agustinus DWIJOKO - PeerSpot reviewer
Network & Security Engineer at PT. Centrin Online Prima
Nov 7, 2023
The Search Engineering feature is good.
 

Rapid7 Metasploit Cons review quotes

Mani Bommisetty - PeerSpot reviewer
Infrastructure patching Manager at a manufacturing company with 1,001-5,000 employees
Dec 17, 2024
The reporting feature needs improvement.
NW
Senior Security Consultant at ITSEC Asia
Feb 21, 2025
While Metasploit excels in vulnerability assessment, it could improve in vulnerability management.
MuhammadMurtaza - PeerSpot reviewer
Information security engineer at Cyberisk
Nov 11, 2024
The database is not always updated with the latest vulnerabilities or zero-day exploits.
Learn what your peers think about Rapid7 Metasploit. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,221 professionals have used our research since 2012.
Md. Shahriar Hussain - PeerSpot reviewer
Information Security Analyst at Banglalink
Feb 23, 2024
If your company's patch is not up to date, but you have other detection or defense solutions such as endpoint detection and response and antivirus software, the product exploit may not work effectively. This is because its exploit database update process is slow and not real-time. For zero-day vulnerabilities or new security threats, relying on Rapid7 Metasploit alone may not be effective.
Andrei Bigdan - PeerSpot reviewer
Executive Manager at B2B-Solutions LLC
Nov 7, 2023
There are numerous outdated exploits in their database that should be updated.
AdeelAgha - PeerSpot reviewer
Team Lead - Cyber Security & Compliance at Al Tuwairqi Group
Mar 3, 2023
The solution is not user-friendly and has room for improvement.
reviewer2295975 - PeerSpot reviewer
Senior cybersecurity engineer at a aerospace/defense firm with 5,001-10,000 employees
Nov 20, 2023
I would like to see more capabilities, more functions, and more features. More types of attack vectors.
reviewer1675638 - PeerSpot reviewer
Cyber Security Director at a manufacturing company with 5,001-10,000 employees
Jun 9, 2023
The open-source version has reporting limitations. You need to develop these capabilities yourself. Built-in reporting is an excellent feature for penetration testing, but it isn't a must-have. The solution could also cover more vulnerabilities. Metasploit has around 10,000 exploits in its library, but more is always better.
Agustinus DWIJOKO - PeerSpot reviewer
Network & Security Engineer at PT. Centrin Online Prima
May 12, 2022
We'd like them to offer better coverage of malware.
Agustinus DWIJOKO - PeerSpot reviewer
Network & Security Engineer at PT. Centrin Online Prima
Nov 7, 2023
Advanced Infrastructure should be implemented in the next release for better orchestration.