# Rapid7 InsightVM vs Tenable Vulnerability Management

**Leader by vioscaleAI score:** Rapid7 InsightVM

| Attribute | Rapid7 InsightVM | Tenable Vulnerability Management |
|---|---|---|
| **vioscaleAI score** | 47.3 (44% (low)) | 25 (63% (medium)) |
| content.faq | `[{"answer":"A vulnerability scanner that identifies security gaps and discovers assets, unified with attack surface assessment and cloud risk insights for comprehensive visibility. It is indexed under Vulnerability Management.","source":"https://www.rapid7.com/ja/products/insightappsec/pricing/","question":"What is Rapid7 InsightVM?","confidence":0.6},{"answer":"Rapid7 InsightVM does not publish its prices. Pricing is quoted on request, across 2 plans (Exposure Command Essentials and Exposure Command Ultimate), so the figure depends on your seat count and requirements. We record this as a pricing-transparency signal rather than guessing a number. Pricing changes often, so verify at source before relying on it.","source":"https://www.rapid7.com/ja/products/insightappsec/pricing/","question":"How much does Rapid7 InsightVM cost?","confidence":0.6},{"answer":"Rapid7 InsightVM supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://www.rapid7.com/de/products/insightappsec/pricing/","question":"What platforms does Rapid7 InsightVM support?","confidence":0.6},{"answer":"Yes. Rapid7 InsightVM can be deployed cloud / SaaS, on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://www.rapid7.com/de/products/insightappsec/pricing/","question":"Can Rapid7 InsightVM be self-hosted?","confidence":0.6},{"answer":"We have independently confirmed SOC 2, ISO 27001 and GDPR for Rapid7 InsightVM. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as Rapid7 InsightVM not holding them. Always confirm compliance directly before you rely on it.","source":"https://www.rapid7.com/solutions/compliance/digital-operational-resilience-act-dora/","question":"What security certifications does Rapid7 InsightVM have?","confidence":0.7}]` | `[{"answer":"Tenable One consolidates vulnerability management with broader exposure data to help organizations identify and remediate critical security risks. It supports multi-cloud and hybrid environments with automated risk prioritization and compliance management capabilities. It is indexed under Vulnerability Management.","source":"https://www.tenable.com/cloud-security/pricing","question":"What is Tenable Vulnerability Management?","confidence":0.6},{"answer":"Tenable Vulnerability Management does not publish its prices. Pricing is quoted on request, so the figure depends on your seat count and requirements. We record this as a pricing-transparency signal rather than guessing a number. Pricing changes often, so verify at source before relying on it.","source":"https://www.tenable.com/cloud-security/pricing","question":"How much does Tenable Vulnerability Management cost?","confidence":0.6},{"answer":"We have confirmed browser-based access to Tenable Vulnerability Management. That is the extent of what we could verify from public sources, so it may well offer desktop or mobile clients we have not indexed.","source":"https://www.tenable.com/cloud-security/pricing","question":"What platforms does Tenable Vulnerability Management support?","confidence":0.6},{"answer":"Yes. Tenable Vulnerability Management can be deployed cloud / SaaS, hybrid, on-premise, air-gapped and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://www.tenable.com/cloud-security/pricing","question":"Can Tenable Vulnerability Management be self-hosted?","confidence":0.6}]` |
| deployment.options | `{"cloud":true,"on_prem":true,"self_hosted":true}` | `{"cloud":true,"on_prem":true}` |
| description.long | A vulnerability scanner that identifies security gaps and discovers assets, unified with attack surface assessment and cloud risk insights for comprehensive visibility. | A cloud-based vulnerability management platform that identifies and prioritizes security risks across cloud infrastructure and on-premises assets, integrating misconfigurations and identity risks into a unified exposure management strategy. |
| features.capabilities | `{"asset_discovery":true}` | `{"asset_discovery":true,"remediation_workflow":true}` |
| integrations.count | 2 | 1 |
| integrations.list | `[{"name":"Jira"},{"name":"ServiceNow"}]` | `[{"name":"Splunk"}]` |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | - |
| platform.support | `{"cli":true,"web":true}` | `{"web":true}` |
| pricing | `{"type":"subscription","plans":[{"free":false,"name":"Exposure Command Essentials","description":"Vulnerability management with attack surface visibility","contactSales":true},{"free":false,"name":"Exposure Command Ultimate","description":"Adds cloud infrastructure and application security assessment","contactSales":true}],"freeTier":false,"sourceUrl":"https://www.rapid7.com/ja/products/insightappsec/pricing/","retrievedAt":"2026-09-06T11:00:47.645Z"}` | `{"type":"subscription","summary":"Annual subscription model; specific pricing not disclosed on this page.","sourceUrl":"https://www.tenable.com/products/vulnerability-management","retrievedAt":"2026-09-29T14:55:19.973Z"}` |
| pricing.free_tier | no | no |
| pricing.model | quote | commercial |
| pricing.price_level | unknown | unknown |
| pricing.transparent | no | no |
| reliability.sla_pct | - | 99.95 |
| security.fedramp | - | yes |
| security.gdpr | yes | - |
| security.iso27001 | yes | - |
| security.pci | - | yes |
| security.soc2 | yes | - |
| security.trust_center | https://www.rapid7.com/platform/security-orchestration-automation-response-soar/ | https://www.tenable.com/education/courses/security-center-specialist |

## Capabilities (Vulnerability Management)

| Capability | Rapid7 InsightVM | Tenable Vulnerability Management |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Authenticated scan | - | - |
| Agent based | - | - |
| Agentless cloud | - | - |
| Asset discovery | ✓ | ✓ |
| Scap oval | - | - |
| PCI asv | - | - |
| Remediation workflow | - | ✓ |
| Fedramp | - | - |
| Open source | - | - |

*Source: vioscaleAI. Generated 2026-10-16T20:16:18.179Z. "-" = undocumented, not absent.*