Scan Engine and Insight Agent Comparison

Scan Engine Overview

A scan engine is an application used with the Security Console that helps discover and collect network asset data and scans them for vulnerabilities and policy compliance. For more information, see our scan engines Help documentation.

Insight Agent Overview

The Insight Agent is lightweight software you can install on supported assets—in the cloud or on-premises—to easily centralize and monitor data on the Insight platform. For more information, see our Insight Agent Help documentation. [block:html] { "html": "

\n<table style="font-size: 14px">\n \n \n <td width="25%">\n Insight Agent\n <td colspan="2" style="text-align:center">Scan Engine\n \n \n \n <td width="25%">\n \n Authenticated\n Unauthenticated\n \n \n \n Speed\n Fastest\n Fast\n Faster\n \n \n \n Credentials\n None\n Required\n None\n \n \n \n Supports Scheduling\n No\n Yes\n Yes\n \n \n \n Scan Blackouts\n No\n Yes\n Yes\n \n \n \n Collection\n Regularly\n During scan\n During scan\n \n \n \n Type of Check\n Local only\n Local, remote, and policy\n Remote only\n \n \n\n\n
" } [/block]

Flexible Deployment Options

The agent and scan engine are designed to complement each other. If both scan the same asset, the console will automatically recognize the data and merge the results.

Scan Engine Usage Scenarios

  • To perform remote or policy checks
  • To discover assets via discovery scans or connections
  • To assess assets unsupported by the agent, such as network devices

Agent Usage Scenarios

  • Asset is located outside of the corporate network
  • Asset is located in a highly isolated or micro-segmented network
  • Asset does not have remote access services (SMB, SSH, etc.) enabled
  • Asset remote access credentials are unavailable
  • Asset is only online for short periods of time
  • Asset is sensitive to network-based scanning
  • Asset requires continuous monitoring as opposed to periodic scans
  • Asset is in a dynamic, cloud, or other complex modern environment that requires flexible deployment


The agent is currently supported on Windows, Linux, and Mac operating systems.