Automox vs. Rapid7 InsightVM

Smaller organisations such as ourselves, who have outgrown their MSP but still need to retain control of their system and have visibility of the estate. The tool enables us to have real-time visibility and deploy or remediate as needed. We have also purchased Rapid7, which integrates natively into the product, making it a more powerful tool moving forward.

Incentivized

InsightVM is great for finding all devices on your network and where the misconfigurations exist. We all have to patch our systems and applications, but it can be difficult to keep track of which systems are up to date. This tool is very helpful in filling in this gap and helping you organize that information. It is easy to get a big picture view of how your organization is doing from a vulnerability perspective, and it is equally as easy to drill down and get specific details that you need. Prioritization is crucial when it comes to this space, because you can never address every vulnerability, so you need to make sure the highest priority items are being remediated. R7's tool excels in this area and highlights items you weren't even aware of.

Incentivized

• Shows applications installed on a specific asset
• Able to push policies and updates remotely , creating policies is easy.
• Keep track of compliant devices and when is the last time they have connected to the servers
• All the great information provided within one single device

Incentivized

• Rapid7 InsightVM is good at agentless scanning.
• Rapid7 InsightVM integration with ServiceNow works very well.
• Rapid7 InsightVM scales very well with deploying scan engines. It can be used in large organizations.
• The user interface of Rapid7 InsightVM is very intuitive and user friendly. It is easy to use.

Incentivized

• Server patching orchestration. There is no way to patch and reboot systems in order of importance, such as database servers before application servers.
• Worklets for patching .net core and similar.
• Worklets for removing unwanted Java installs or other unwanted software.
• Integration with Tenable Vulnerability Management.
• AI script development should be included at no additional cost; GPT or Gemini can be used instead for free and pasted into Automox. Why charge when others are free?
• Official worklets are slow to be added or updated.

Incentivized

• From my experience of using this tool, sometimes it gives more false positives. A few times I had performed the scan on the same IP address using QualysGuard and Nexpose, but after comparing the scan results I had found that QualysGuard had provided more accurate vulnerability information.

Incentivized

This is a software that just works. Once configured its a set and forget kind of tool that keeps things up to date and alerts me if something is wrong. I was able to work through an expansion project to deploy an additional 500 devices in almost no time and create a robust self-patching environment.

Incentivized

It truly functions like a single pane of glass. While our use case is for EC2 instances in AWS, it can manage endpoints across all clouds, or even deployed hardware (laptops). We do manage instances in multiple AWS accounts and there is no set up required between orgs. This accomplishes our needs for real time tracking, and historical reporting for all of our in scope resources.

Incentivized

While I think it is a great tool and platform, I believe it (like all tools and solutions) is always evolving and the needs for clients are changing as the industry evolves and threats are upgraded. Cost is good, and support is helpful. Some things could be more granular and others could be easier to understand

Incentivized

1. Simplicity and Ease of Use 2. Cross-Platform Support 3. Powerful Automation with Worklets 4. Real-Time Visibility and Control 5. Fast and Reliable Cloud-Based Updates 6. Strong Security Focus

Incentivized

I gave it a seven due to the functionality and general ease of use after the initial setup headaches, but compared to Qualys, Rapid7 Nexpose falls short on features and ease of use. Their support drags this rating down a point as well. I have gone weeks with no update on semi-critical issues and typically have to make call after call to get a semi-coherent response.

Incentivized

Implementing Automox successfully starts with a clear strategy for organizing and grouping devices based on operating systems, environments, or business criticality. This ensures that patching and configuration policies can be applied with precision. A phased rollout approach is essential—beginning with a pilot group allows teams to test patching schedules, reboot behaviors, and custom Worklets before scaling across the organization. Leveraging Worklets from the start can significantly boost automation by enforcing security baselines and performing routine system tasks. Integration with existing SOC tools, such as SIEMs, enhances visibility and response time by correlating patch compliance with threat intelligence. Additionally, aligning patching schedules with operational downtimes minimizes disruptions, and consistent monitoring and reporting helps maintain compliance and prepare for audits. Overall, Automox offers a streamlined and effective solution, but its true value is unlocked through thoughtful planning, testing, and integration with existing IT and security workflows.

Incentivized

All of these other products are overly complicated with user interfaces that are not very friendly.. too technical, even for IT pros. They are also expensive for smaller companies or those with limited IT budgets. I've found that these other solutions are really geared for larger enterprises more than small to midsized companies, which is fine... but then they tend to market themselves as good for everyone, when they are really not.

Incentivized

Rapid7 InsightVM is a more professional tool than Nessus because historically, it was based on metasploit which is a powerful pentesting and exploiting tool. InsightVM covers more attacking scenarios and vulnerabilities than competitors and still a leader in this domain.cloud capability is also not available forNesuus and some other products. Rapid7 InsightVM is a way better as a pentesting tool in my opinion

Incentivized

• Patches are now fully up to date and we have no longer been dinged for it from our pen testing partners.
• Reduced man hours spent on maintaining an update server and the hours spent looking at each machine to ensure it patched all software both windows and third party.
• Allows for us to provide a vendor with a means to connect to our systems without the use of a VPN.

Incentivized

• After spending 2 years configuring, tuning, troubleshooting, and ultimately having nothing but regrets, we migrated away from the tool and accepted the loss.
• Support had a variety of opinions, none of them consistent. No best practices. Lots of secret tricks known by support, none documented or shared until after problems are found.
• Consulting services are available to come out and do a health check of your deployment, for a fee.

Incentivized