# Qualys VMDR vs Rapid7 InsightVM

| Attribute | Qualys VMDR | Rapid7 InsightVM |
|---|---|---|
| **Vioscale score** | 5.6 (15% (low)) | 28.7 (30% (low)) |
| deployment.options | `{"cloud":true,"on_prem":true,"self_hosted":true}` | `{"cloud":true,"on_prem":true,"self_hosted":true}` |
| description.long | A vulnerability management platform that identifies security weaknesses, prioritizes them by business impact, and automates remediation workflows. It includes asset discovery, vulnerability scanning, compliance reporting, and integration with IT ticketing and remediation systems. | InsightVM scans infrastructure for vulnerabilities and is part of Rapid7's broader Exposure Command platform, which unifies vulnerability management, attack surface monitoring, cloud security, and application risk detection in a single interface. |
| integrations.count | 3 | 2 |
| integrations.list | `[{"name":"ServiceNow ITSM"},{"name":"Jira"},{"name":"Amazon Inspector"}]` | `[{"name":"Jira"},{"name":"ServiceNow"}]` |
| market.availability | `{"primaryMarkets":["US","EU","GB"],"availabilityScope":"global","availableCountries":["US","GB","EU","CA","IN","AE","AU","SA"],"notAvailableCountries":[]}` | `{"hqCountry":"US","primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"web":true}` | `{"cli":true,"web":true}` |
| pricing | `{"type":"subscription","currency":"USD","sourceUrl":"https://www.qualys.com/partners/qlu-pricing","retrievedAt":"2026-08-20T12:47:23.533Z"}` | `{"type":"subscription","summary":"Pricing available; free trial offered for hands-on evaluation","currency":"USD","freeTier":false,"sourceUrl":"https://www.rapid7.com/de/products/insightappsec/pricing/","retrievedAt":"2026-08-19T22:49:37.527Z","billingPeriods":["year"]}` |
| pricing.free_tier | - | no |
| pricing.model | commercial | commercial |
| pricing.price_level | unknown | unknown |
| pricing.transparent | no | no |
| security.gdpr | - | yes |
| security.iso27001 | - | yes |
| security.soc2 | - | yes |

## Capabilities (Vulnerability Management)

| Capability | Qualys VMDR | Rapid7 InsightVM |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Authenticated scan | - | - |
| Agent based | - | - |
| Agentless cloud | - | - |
| Asset discovery | - | - |
| Scap oval | - | - |
| PCI asv | - | - |
| Remediation workflow | - | - |
| Fedramp | - | - |
| Open source | - | - |

*Source: Vioscale. Generated 2026-09-01T17:00:32.502Z. "-" = undocumented, not absent.*