Microsoft Defender for Business is an enterprise-grade endpoint security that is designed especially for businesses with up to 300 employees. It is used to deploy security across devices, and use automated built-in intelligence to rapidly protect, detect, and respond to threats.
N/A
Rapid7 InsightVM
Score 8.9 out of 10
N/A
InsightVM is presented as the next evolution of Nexpose, by Rapid7. This Insight cloud-based solution features everything included in Nexpose, such as Adaptive Security and the proprietary Real Risk score, and extends visibility into cloud and containerized infrastructure. InsightVM also offers advanced remediation, tracking, and reporting capabilities not included in Nexpose.
$19
per GB
Pricing
Microsoft Defender for Business
Rapid7 InsightVM
Editions & Modules
No answers on this topic
Log Management
$19
per GB
Vulnerability Management
$22
per asset
insightIDR
$52
per asset
Application Security
$2,000
per app
insignConnect
Contact sales team
Offerings
Pricing Offerings
Microsoft Defender for Business
Rapid7 InsightVM
Free Trial
Yes
No
Free/Freemium Version
No
No
Premium Consulting/Integration Services
No
No
Entry-level Setup Fee
No setup fee
No setup fee
Additional Details
—
—
More Pricing Information
Community Pulse
Microsoft Defender for Business
Rapid7 InsightVM
Features
Microsoft Defender for Business
Rapid7 InsightVM
Endpoint Security
Comparison of Endpoint Security features of Product A and Product B
Microsoft Defender for Business
9.9
Ratings
14% above category average
Rapid7 InsightVM
-
Ratings
Anti-Exploit Technology
10.00 Ratings
00 Ratings
Endpoint Detection and Response (EDR)
10.00 Ratings
00 Ratings
Centralized Management
10.00 Ratings
00 Ratings
Hybrid Deployment Support
9.00 Ratings
00 Ratings
Infection Remediation
10.00 Ratings
00 Ratings
Vulnerability Management
10.00 Ratings
00 Ratings
Malware Detection
10.00 Ratings
00 Ratings
Threat Intelligence
Comparison of Threat Intelligence features of Product A and Product B
Microsoft Defender for Business
-
Ratings
Rapid7 InsightVM
7.4
Ratings
7% below category average
Network Analytics
00 Ratings
5.30 Ratings
Threat Recognition
00 Ratings
7.00 Ratings
Vulnerability Classification
00 Ratings
9.30 Ratings
Automated Alerts and Reporting
00 Ratings
9.30 Ratings
Threat Analysis
00 Ratings
7.40 Ratings
Threat Intelligence Reporting
00 Ratings
7.00 Ratings
Automated Threat Identification
00 Ratings
6.70 Ratings
Vulnerability Management Tools
Comparison of Vulnerability Management Tools features of Product A and Product B
Microsoft Defender for Business is well suited for any size organization using the Microsoft 365 Suite. As an included feature in the mid and upper tiers of the 365 suites, it can quickly address antivirus protection for any sized company. It's compliance and security dashboards can help guide sole proprietorship owners in better understanding their security standing. The software also scales to give mid-sized and enterprise originations the in-depth information needed for compliance.
I think Rapid7 InsightVM is well suited for large enterprise customers with a lot of assets. It integrates well with a number of different ITSM solutions which I think is very good. There are not many CIS benchmarking tools on the market and Rapid7 InsightVM does a very good job at benchmarking. I think where Rapid7 InsightVM falls down a little is on false positive vulnerabilities. Sometime you there a few positive results on vulnerabily discovery. Tuning the settings for scan engines can sometimes be trick as well.
The API is also a great tool for us to automate lots of routine procedures like scan and report of asset(s) BY EMAIL.
Tagging. It helps sort out results and reports for respective assets Owner for remediation without a lengthy report including unnecessary information for that particular team.
SQL Reporting. It provides advanced reporting and export capabilities that you can not find in the stock report template.
Devices found and scanned are never removed. Removal must be done manually with no option for automation.
The database can be fragile. Ours quietly corrupted and progressively degraded until we had to restore and lose 6 months of data. Still didn't fix it and had to be rebuilt again losing all data.
Workflow for delegating remediation is supposed to be helpful, but can also become cumbersome.
Scheduling can become a nightmare if not monitored closely. We found jobs had failed to run because the server had gone offline. When the server came online, it did not try to run missed jobs. Running missed jobs all at once can overload the server, but searching for and launching a large number of missed jobs manually is a pain.
Microsoft Defender for Business is user friendly but requires some IT knowledge to adapt to its full potential. Microsoft 365 business will likely be more adaptable and have less of a learning curve than new users when configuring settings or security policies. Overall, I would say that strengths outweigh weaknesses and the unknowns can be learned
While I think it is a great tool and platform, I believe it (like all tools and solutions) is always evolving and the needs for clients are changing as the industry evolves and threats are upgraded. Cost is good, and support is helpful. Some things could be more granular and others could be easier to understand
I gave it a seven due to the functionality and general ease of use after the initial setup headaches, but compared to Qualys, Rapid7 Nexpose falls short on features and ease of use. Their support drags this rating down a point as well. I have gone weeks with no update on semi-critical issues and typically have to make call after call to get a semi-coherent response.
Microsoft Defender for Business, I believe, is a "light" version of Microsoft Defender for Endpoint. While they both have some of the same features, Microsoft Defender for Business has far less, and the more complex you want to get with your configurations, you may need to dip your toe into the InTune Admin Center to deploy certain policies.
I think Tenable is very comparable and they are both leaders in this space. I evaluated both of them side-by-side and ultimately decided to go with Rapid7. Tenable did have a slight edge on the amount of information I was getting from the machines, but I landed on R7 because I found the features of the InsightVM tool to be more useful. They both get the job done, but I found InsightVM a better experience to use on a day-to-day basis and had better quality of life features that I was looking for.
It certainly has a more positive impact than negative impact while performing the scans. Nexpose can find report vulnerabilities that our other scanner fails to identify during the scan because of its defined scan templates.
Also, even if the scan is not being performed due to some issues like reachability, whitelisting, etc. it will try to give scan results unlike QualysGuard which just marks the asset as unreachable.
