Updated October 2026
Rapid7 InsightVM and Nexpose pricing (2026)
Quick answer
InsightVM starts at $1.62 per asset per month for 500 assets, about $9,720 a year. Nexpose, the on-premises version, listed at $26.25 per asset per year for small deployments in Rapid7's 2024 price list. Rapid7 now sells InsightVM inside Exposure Command, by quote. Panoptic Scans covers 500 targets on its $200/month Pro plan.
Rapid7 vulnerability management prices
Checked 28 October 2026 on Rapid7's pricing page, the InsightVM AWS Marketplace listing, and Rapid7's March 2024 price list as published by South Carolina state procurement.
| Product | What it is | Price |
|---|---|---|
| InsightVM | Rapid7's cloud vulnerability management, with scan engines and the Insight Agent you deploy | From $1.62 per asset per month for 500 assets. $3,840/year for up to 128 assets on AWS Marketplace |
| Exposure Command | The package that now includes InsightVM. Essentials adds attack surface management, and Ultimate adds cloud and application security | By quote |
| Nexpose | The on-premises version. Includes discovery, unlimited scan engines and templates, and up to 3 consoles | $26.25 per asset per year at 128 to 256 assets, down to $7.52 at 20,480 (2024 list) |
| InsightAppSec | Rapid7's web application scanner, sold separately | $175/month per app |
| Panoptic Scans | Hosted OpenVAS, ZAP, Nuclei, and Nmap, with web app scanning on every plan | $25/month for 75 targets, $75 for 300, $200 for 7,500 |
What 128 and 500 assets cost per year
Rapid7 counts assets, meaning devices. Panoptic Scans counts IP addresses and hostnames as targets. Panoptic Scans prices are monthly billing times 12. Annual billing saves another 10%.
| Assets or targets | InsightVM | Nexpose (2024 list) | Panoptic Scans |
|---|---|---|---|
| 128 | $3,840 on AWS Marketplace | $3,360 | $900 on Premium (300 targets) |
| 500 | About $9,720 at $1.62 per asset per month | $11,827 for 512 assets | $2,400 on Pro (7,500 targets) |
Panoptic Scans compared with InsightVM
| Area | Panoptic Scans | Rapid7 InsightVM |
|---|---|---|
| Setup | Sign up and scan external targets from our servers | Deploy scan engines or agents, managed from Rapid7's cloud console |
| Agents | None. Internal scanning on Pro runs from a VM you control | Insight Agent for endpoints and servers |
| Web app scanning | ZAP on every plan, with authenticated scans from Basic | InsightAppSec, $175/month per app |
| Automation | REST API, webhooks, and MCP server on every plan | REST API |
| Client reports | White-label PDF reports and the attack narrative on Premium and Pro. See a sample report | Remediation and trend reports in the console |
| Billing | Monthly or annual, from $25/month | Annual subscription per asset |
When Rapid7 is worth the price
InsightVM fits teams that need agents on laptops and servers, policy assessment against CIS and NIST benchmarks, and one risk view across thousands of internal assets. Nexpose fits the same teams when scan data has to stay on premises.
Panoptic Scans fits when most targets face the internet, you scan them for several clients, and you want web app scanning on the same plan. If you're comparing other options as well, see InsightVM alternatives.
Panoptic Scans plans
Each plan is a flat monthly price with its targets included. Every plan has OpenVAS, ZAP, Nuclei, and Nmap, plus the REST API, webhooks, MCP server, and Vanta integration. Annual billing saves 10%.
| Plan | Price | Targets | Per target per month | What it adds |
|---|---|---|---|---|
| Trial | Free for 3 days, no credit card | 1 | Free | One-time scans with any of the four scanners |
| Basic | $25/month | 75 | $0.33 | Scheduled scans and authenticated ZAP scans |
| Premium | $75/month | 300 | $0.25 | White-label PDF reports and the attack narrative |
| Pro | $200/month | 7,500 | Under $0.03 | Internal network scanning from a VM you control |
Compare Panoptic Scans with your Rapid7 renewal.
3-day trial, no credit card. Plans from $25/month.
Frequently asked questions
How much does InsightVM cost?
Rapid7's pricing page lists vulnerability risk management (InsightVM) from $1.62 per asset per month for 500 assets, which is about $810 a month or $9,720 a year. On AWS Marketplace, a 12-month InsightVM contract for up to 128 assets is $3,840. Rapid7 now sells InsightVM as part of Exposure Command, which is priced by quote.
How much does Nexpose cost?
Rapid7 doesn't publish Nexpose prices on its website. Its March 2024 price list, published by South Carolina state procurement, shows Nexpose at $26.25 per asset per year for 128 or 256 assets, falling to $10.40 at 10,240 assets and $7.52 at 20,480 assets.
What is the difference between Nexpose and InsightVM?
Both use Rapid7's vulnerability scanner. Nexpose is the on-premises product, managed from a console you host. InsightVM runs on Rapid7's cloud platform and adds Rapid7's Insight Agent for endpoints. Rapid7 still sells Nexpose for teams that must keep scan data on premises.
What is Rapid7 Exposure Command?
Exposure Command is the Rapid7 package that now includes InsightVM. Exposure Command Essentials combines InsightVM with attack surface management, and Exposure Command Ultimate adds cloud and application security. Rapid7 sells both by quote.
How does Panoptic Scans pricing compare with InsightVM?
Panoptic Scans Basic is $25/month for 75 targets, Premium is $75/month for 300 targets, and Pro is $200/month for 7,500 targets. For 500 targets that is the Pro plan at $2,400 a year, compared with about $9,720 a year for 500 InsightVM assets at Rapid7's published rate. Panoptic Scans has no agents, so the products aren't like for like.
Related: InsightVM alternatives · Nessus alternatives · Qualys alternative · MSP scanning · Pricing