Cisco Vulnerability Management

Name: Cisco Vulnerability Management
Brand: Cisco
Rating: 4.3 (254 reviews)

Cisco Vulnerability Management is a risk-based vulnerability management platform that ingests and normalizes findings from multiple scanners and security tools, applies predictive risk scoring to prioritize remediation, and manages remediation workflows and ITSM integrations.

Website

MarketsVulnerability Management Cloud-Native Application Protection Platform (CNAPP)Web Application & API Protection (WAAP)Security Information and Event Management (SIEM)Enterprise Risk Management (ERM)

Cisco Vulnerability Management screenshot

01Competitive Landscape

Narrative analysis

Feature differentiation: - Cisco CVM focuses on risk-based prioritization and workflow alignment and typically operates on top of scanner data. - Tenable, Rapid7, and Qualys prioritize scanning breadth, discovery, and plugin ecosystems, and also provide prioritization features. Pricing comparison: - Cisco typically requires quote-based purchasing and enterprise sales engagement. - Some competitors publish entry-level pricing, which can simplify initial procurement comparisons. Customer testimonials comparing vendors: - MSP and community discussions compare vendors on price and operational fit; these discussions do not directly evaluate CVM but are relevant when CVM is considered as part of a consolidated tooling strategy. Market trend: exposure management - The market is evolving from traditional vulnerability management toward exposure management and continuous threat exposure management (CTEM). Some vendors position themselves specifically for exposure management and target migrations from legacy RBVM deployments.

	Cisco Vulnerability Management	Tenable Vulnerability Management	Rapid7 InsightVM
Starting Price	Quote-based publicly (multiple enterprise tiers)	Public entry pricing available online; example online listing showed an entry offering for a limited asset count	Public per-asset pricing with published tiers and annual billing options
Best For	Organizations that require an RBVM prioritization layer across multiple tooling sources and want integration with Cisco security ecosystem	Organizations that need scanner-first capabilities and the option for self-service purchase	Organizations that want vulnerability management integrated into the Rapid7 ecosystem and prefer transparent per-asset pricing
Key Strength	Prioritization and risk scoring, integrations with multiple data sources, and integration with Cisco security services	Broad scanning capabilities, widely adopted VM platform, published entry pricing	Strong VM capabilities with integration into Rapid7 products and clear pricing tiers
Key Weakness	Public ambiguity around pricing and lifecycle roadmap; reported correlation/support operational issues in public reviews	Can be costly at scale; asset counting and licensing complexity can be a factor	May be more expensive in some scenarios; requires program maturity for full value realization

01Competitive Landscape

Narrative analysis

Feature differentiation:

Cisco CVM focuses on risk-based prioritization and workflow alignment and typically operates on top of scanner data.
Tenable, Rapid7, and Qualys prioritize scanning breadth, discovery, and plugin ecosystems, and also provide prioritization features.

Pricing comparison:

Cisco typically requires quote-based purchasing and enterprise sales engagement.
Some competitors publish entry-level pricing, which can simplify initial procurement comparisons.

Customer testimonials comparing vendors:

MSP and community discussions compare vendors on price and operational fit; these discussions do not directly evaluate CVM but are relevant when CVM is considered as part of a consolidated tooling strategy.

Market trend: exposure management

The market is evolving from traditional vulnerability management toward exposure management and continuous threat exposure management (CTEM). Some vendors position themselves specifically for exposure management and target migrations from legacy RBVM deployments.

	Cisco Vulnerability Management	Tenable Vulnerability Management	Rapid7 InsightVM
Starting Price	Quote-based publicly (multiple enterprise tiers)	Public entry pricing available online; example online listing showed an entry offering for a limited asset count	Public per-asset pricing with published tiers and annual billing options
Best For	Organizations that require an RBVM prioritization layer across multiple tooling sources and want integration with Cisco security ecosystem	Organizations that need scanner-first capabilities and the option for self-service purchase	Organizations that want vulnerability management integrated into the Rapid7 ecosystem and prefer transparent per-asset pricing
Key Strength	Prioritization and risk scoring, integrations with multiple data sources, and integration with Cisco security services	Broad scanning capabilities, widely adopted VM platform, published entry pricing	Strong VM capabilities with integration into Rapid7 products and clear pricing tiers
Key Weakness	Public ambiguity around pricing and lifecycle roadmap; reported correlation/support operational issues in public reviews	Can be costly at scale; asset counting and licensing complexity can be a factor	May be more expensive in some scenarios; requires program maturity for full value realization