Scanning is fine, the remediation workflow is why we stayed
What happened
Every scanner finds vulnerabilities. What we needed was a way to hand IT a list they would actually work through, and the remediation projects plus the goals view did that better than what we replaced. Reporting for the board is decent out of the box. Agent coverage on ephemeral cloud hosts is still fiddlier than it should be.
Worked well
Remediation workflow and ownership. Board reporting. Query language is approachable.
Did not
Cloud and ephemeral asset coverage needs work. Console can be slow with large asset counts. Some integrations feel dated.
Greg from Rapid7, disclosed. The point about ephemeral cloud assets is one we hear consistently and it is a real gap rather than a configuration problem at your end. Agent coverage for short-lived hosts works differently from persistent ones and the documentation has not made that distinction well. Happy to walk through the cloud connector approach, which fits that pattern better than agents do.
A vendor reply sits beside a review and never replaces it. The review above is unchanged.