Rapid7 InsightVM

InsightVM uses a Real Risk score ranging from 1 to 1,000 instead of relying on CVSS alone. Rapid7 says the score can include CVSS, malware exposure, exploit exposure, ease of use, and vulnerability age. [Rapid7 product brief](https://www.rapid7.com/globalassets/_pdfs/insightvm-product-brief.pdf)

Yes. Its Security Console and Scan Engines run site-based network assessments, while the Rapid7 Insight Agent collects data from endpoints such as remote-worker laptops that may rarely connect to the corporate network. InsightVM also assesses container images through the agent and registry or CI/CD integrations. [Rapid7 documentation](https://docs.rapid7.com/insightvm/) [Container assessment](https://docs.rapid7.com/insightvm/objective-5-assess-your-containers/)

Remediation Projects assign and monitor work, update as vulnerabilities disappear, and show whether fixes have been verified. Rapid7 also documents integrations with ticketing systems such as Jira and ServiceNow. [Rapid7 remediation documentation](https://docs.rapid7.com/insightvm/remediation-workflow/)

InsightVM uses the vulnerability research and scanning heritage of Rapid7's Nexpose technology, but adds the Insight cloud platform, live dashboards, endpoint analytics, and collaboration features. Rapid7 still documents Nexpose as a comparison point for deployment and remediation capabilities. [Rapid7 documentation](https://docs.rapid7.com/insightvm/) [Feature comparison](https://www.rapid7.com/globalassets/_pdfs/product-and-service-briefs/rapid7-insightvm-nexpose-feature-comparison.pdf)