Rapid7 InsightVM is a vulnerability-management platform spanning endpoint to cloud, using a single Insight Agent plus agentless scan engines. It covers web app scanning, container and cloud security (via Exposure Command / InsightCloudSec), and prioritizes findings with the Active Risk model. Built for enterprise security teams, it is commercial with both on-prem and SaaS deployment. InsightGovCloud is FedRAMP-authorized.
vulnerability-managementinsightvmactive-riskenterprise
Overview
- Founded
- 2000
- Pricing tier
- High
- Startup-friendly
- No
- Enterprise-ready
- Yes
Vulnerability management
- Agent-based
- Yes
- Agentless scanning
- Yes
- Web app scanning (DAST)
- Yes
- Container scanning
- Yes
- Cloud scanning
- Yes
- Risk prioritization
- Yes
- Open-source
- No
- Self-hostable
- Yes
- Free tier
- No
SIEM
- Cloud-native
- Yes
- Threat detection
- Yes
- SOAR included
- Yes
- Free tier
- No
- Deployment
- SaaS
Cloud security (CSPM/CNAPP)
- Agentless scanning
- Yes
- CSPM (posture)
- Yes
- CWPP (workload)
- Yes
- CIEM (entitlements)
- Yes
- IaC scanning
- Yes
- Kubernetes security
- Yes
- Multi-cloud
- Yes
- Open-source
- No
- Free tier
- No
Categories & compliance
Categories
Compliance
SOC2ISO27001FedRAMPIRAP