Rapid7 InsightVM: Live Dashboards and Real Risk Prioritisation

InsightVM is Rapid7’s core vulnerability management product and the successor to Nexpose, one of the older names in this space. What’s kept it relevant is the tie-in to Rapid7’s own vulnerability research and Metasploit exploit development – the same team finding and weaponising vulnerabilities for testing purposes feeds directly into how InsightVM scores risk.

What is Rapid7 InsightVM?

InsightVM is a vulnerability management platform built on the Insight Platform, combining lightweight endpoint agents (the Insight Agent) and network scan engines to continuously assess on-prem, cloud, and remote assets. Its dashboards are described as “live” because they update as new scan or agent data arrives rather than requiring a manual refresh or report re-run – useful for tracking remediation progress in near real time rather than waiting for the next scheduled scan cycle.

Key features

• Real Risk score – a 1-1000 scale prioritisation score that factors in malware exposure, exploit exposure (including Metasploit availability), and CVSS rather than CVSS alone.
• Insight Agent – a shared lightweight agent used across multiple Rapid7 products, so vulnerability, EDR, and log data can come from a single endpoint footprint.
• Live dashboards and goals/SLAs – customisable dashboards and remediation SLA tracking that update continuously rather than on a scan-cycle basis.
• Container security – vulnerability assessment for container images in registries and CI/CD pipelines, not just running hosts.
• Remediation projects – groups related findings into a single trackable project assigned to the team responsible, rather than a flat list of individual tickets.

Who it’s for

Security teams that want vulnerability data tied closely to real-world exploit availability, and that may already use other Rapid7 Insight products (InsightIDR for SIEM, InsightConnect for SOAR) where a shared agent and data platform reduce overhead. It’s also a solid fit for teams that want to demonstrate remediation velocity to stakeholders via SLA tracking.

Rapid7 InsightVM vs the alternatives

Against Qualys VMDR, InsightVM leans more on exploit-availability-driven scoring and less on built-in patch deployment. Against Tenable Vulnerability Management, both are close competitors with broadly comparable scanning capability – the differentiator is usually which broader platform (Rapid7 Insight vs Tenable One) you want your exposure and detection data to eventually live in.

Getting started

Rapid7 offers a trial of InsightVM that includes the Insight Agent – worth deploying it to a mix of servers and endpoints rather than only scanning over the network, since agent-based and network-based results can genuinely differ for assets that aren’t always on the corporate network.