ThreatDown, powered by Malwarebytes vs. Rapid7 InsightVM

I would absolutely recommend Malwarebytes Endpoint Protection to a colleague and I have recommended it to many of my peers in the IT world. Malwarebytes is well suited for any environment that requires protection from mal/ransomware which is most companies these days. In particular for companies that host their own big data that the operation of the company relies on. The only place Malwarebytes Endpoint Protection may not be AS appropriate would be one where there is near zero reliance on computers, networks and data.

Incentivized

I think Rapid7 InsightVM is well suited for large enterprise customers with a lot of assets. It integrates well with a number of different ITSM solutions which I think is very good. There are not many CIS benchmarking tools on the market and Rapid7 InsightVM does a very good job at benchmarking. I think where Rapid7 InsightVM falls down a little is on false positive vulnerabilities. Sometime you there a few positive results on vulnerabily discovery. Tuning the settings for scan engines can sometimes be trick as well.

Incentivized

• The biggest plus with this software is that you can manage all the clients from a management console. You can push the install/updates through it. If the client cannot connect to the management console, then it will update directly from their website. This means you are always up to date and protected.
• The software on the client machine has very low overhead so it doesn't affect the performance.
• You can create policies based on the types of users or by the department. You can customize these policies so it will let you micro-manage the clients.

Incentivized

• The API is also a great tool for us to automate lots of routine procedures like scan and report of asset(s) BY EMAIL.
• Tagging. It helps sort out results and reports for respective assets Owner for remediation without a lengthy report including unnecessary information for that particular team.
• SQL Reporting. It provides advanced reporting and export capabilities that you can not find in the stock report template.

Incentivized

• poor customer service
• dashboard says product is working EVEN THOUGH IT WAS NOT!
• slow response to concerns that should be easy to remedy
• creates baggage which caused certain computers and the network to run more slowly
• caused 3 computers on our network top have windows errors and network issues

• Devices found and scanned are never removed. Removal must be done manually with no option for automation.
• The database can be fragile. Ours quietly corrupted and progressively degraded until we had to restore and lose 6 months of data. Still didn't fix it and had to be rebuilt again losing all data.
• Workflow for delegating remediation is supposed to be helpful, but can also become cumbersome.
• Scheduling can become a nightmare if not monitored closely. We found jobs had failed to run because the server had gone offline. When the server came online, it did not try to run missed jobs. Running missed jobs all at once can overload the server, but searching for and launching a large number of missed jobs manually is a pain.

Incentivized

When I first used the tool in my home systems MANY years ago, I wished for a Business version. I was once at a focus group for a major antivirus company, and one attendee’s feedback to “what could we do better?” was “buy out MalwareBytes and add it to your tool”. I’ve used the Business version since it first became available, and have continued to be a dedicated user through the many iterations and improvements

Incentivized

It simply works. It doesn't require the hand-holding and monitoring that some other solutions do. It's simple to deploy and maintain, and adding custom content such as Exceptions require minimal effort. I’ve had to add a few exceptions for internal-use, in-house-developed tools, but it’s quite simple to do so within the online interface

Incentivized

While I think it is a great tool and platform, I believe it (like all tools and solutions) is always evolving and the needs for clients are changing as the industry evolves and threats are upgraded. Cost is good, and support is helpful. Some things could be more granular and others could be easier to understand

Incentivized

Whenever I've had a query for the support team, they have got back to me very quickly, and given me very well detailed advice on fixing whatever the issue I had was. They also pointed me to help documents and such where I could find more information if I needed

Incentivized

I gave it a seven due to the functionality and general ease of use after the initial setup headaches, but compared to Qualys, Rapid7 Nexpose falls short on features and ease of use. Their support drags this rating down a point as well. I have gone weeks with no update on semi-critical issues and typically have to make call after call to get a semi-coherent response.

Incentivized

I first implemented this more than 10 years ago, when it required an in-site setup with SQL Server (or SQL Express), and even that was pretty easy. With the move to centralized web management some treats ago, it’s become even easier to deploy

Incentivized

I think Malwarebytes Endpoint Protection is hands down better from any point of view other than price. Malwarebytes is a little bit more costly than Webroot. However, Malwarebytes detects more threats, protects against more malicious URL's, allows more in customization of policies, has better administration GUI, and has better means of implementation.

Incentivized

I think Tenable is very comparable and they are both leaders in this space. I evaluated both of them side-by-side and ultimately decided to go with Rapid7. Tenable did have a slight edge on the amount of information I was getting from the machines, but I landed on R7 because I found the features of the InsightVM tool to be more useful. They both get the job done, but I found InsightVM a better experience to use on a day-to-day basis and had better quality of life features that I was looking for.

Incentivized

• Other than over billing our company by $6,821.76, our clients are very happy with our approach to network security and malware protection
• Our service and lack of data breaches (do in part to Malwarebytes) has allowed us to retain our client base for over two decades.

• It certainly has a more positive impact than negative impact while performing the scans. Nexpose can find report vulnerabilities that our other scanner fails to identify during the scan because of its defined scan templates.
• Also, even if the scan is not being performed due to some issues like reachability, whitelisting, etc. it will try to give scan results unlike QualysGuard which just marks the asset as unreachable.

Incentivized