Rapid7 InsightVM

Rapid7 InsightVM is our vulnerability scanner. This is one of the pillars of information security, and I firmly believe that in order to do cyber security right, then you need to have a tool that performs this function. The problems addressed by this tool are self-evident in that it finds vulnerabilities in your environment. Now I personally think R7 goes above and beyond with their product offering in that they provide a host of other information to help you remediate the vulnerabilities and they display the information in a very digestible way. This tool is scanning all of our devices, and even helping us find what devices we are not accounting for.

• Cyber security is often considered a cost center, but it's easy to underestimate how much cost avoidance takes place when you identify and remediate a large amount of vulnerabilities.
• This tool provides board members with a big picture view of how the organization is looking from a risk and security perspective, which provides confidence and verification for decision makers.
• This tool is only as useful as the people who use it, so make sure that you hire qualified staff to operate the platform, otherwise it will just be shelfware that you're not using.

Tenable Nessus and Nmap

CrowdStrike Falcon

I use Rapid7 InsightVM to help identify and remediate our vulnerabilities. The business problems are discovering and remediating vulnerabilities. The scope is to identify and addressing all vulnerabilities in our organization. We also use Rapid7 InsightVM to track CIS baseline policy compliance for various operating systems. The includes MacOS, Windows and Linux. We are able to scan all assets and prioritized vulnerabilities for remediation.

• I think that Rapid7 InsightVM does a good job and provide us with value on addressing vulnerabilities.

Microsoft Defender for Endpoint and Tenable Nessus

Microsoft Defender for Cloud Apps, Microsoft Defender for Cloud, CrowdStrike Falcon

We track remediation projects/phases, view and audit vulnerability remediation, as well as department shared goals. I am over the patching aspect for our organization and I enjoy being able to have a dashboard with supporting data and information. We use this tool to collaborate with our Cybersecurity division to share data, view assets and user the reporting feature for our meetings.

• positive return on investment for our organization
• Create internal/operational efficiencies
• Improve compliance & risk management

Qualys VMDR

Automox

As a financial institution, we have to be up and running securely 24x7x365. So be online is easier with Cloud services but security is concern when you operate in Cloud environment and that is where Rapid7 InsightVM helps us. Rapid7 InsightVM help us to scan our overall infrastructure including cloud infra. here we have complete glance our vulnerability and remediation.

• Live Dashboarding
• Risk Prioritization
• Container Security

• Positive- Continue Monitoring
• Positive- Great Reporting
• Negative- Shadow IT is big mess

Qualys Cloud Platform

Qualys Cloud Platform, ServiceNow Governance, Risk, and Compliance

I used to use Rapid7 InsightVM as a pentesting tool. I implemented the solution on servers to test the client environment by scanning sensitive servers. The main goal is to find weaknesses and vulnerabilities in the systems that could be exploited by hackers. And then generate a report that could be used as a reference for patching the system.

• progress tracking
• full network scan capability
• patch managment

• less attackes good be succefull
• less investment on audit and external pentesting resources
• fully automated solution with few human interaction needed

Nessus

Palo Alto Networks Cortex XDR, Palo Alto Networks Cortex XSOAR, Palo Alto Networks Prisma SD-WAN