

"We have a subscription, the licensing fees are paid yearly, and I am using the latest version."."We pay approximately $2,500 on a yearly basis.".At the end of the day, even if we get ransomware, as long as I reported it, followed my protocol, and put in the change, irrespective of whether it was ignored or denied, I did my job." I have it, and I could use it effectively and do my report. At this point, I don't care about how much it costs my company to have it because if I wasn't able to report it and we got ransomware, then who cares? I'm probably going to be out of business because it happened. This is the tool that is there in my toolbox to say whether we vulnerable or not. That's why I'm speaking only as an information security officer to security operations. The risk and insurance money associated with having ransomware on my networks is going to cost me more money, time, and marketing than the price of the tool.


If you're a big network, obviously, you need to scan everything. "Nowadays, your vulnerability applications are going to be kind of pricey because lots of them, including Rapid7, are based upon a base price, but then they add in the nodes.
