No more typing reviews! Try our Samantha, our new voice AI agent.

Akamai Guardicore Segmentation vs Cloudflare One vs Rapid7 InsightIDR comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

Microsegmentation Software Mindshare Distribution
ProductMindshare (%)
Akamai Guardicore Segmentation22.7%
Illumio26.5%
VMware NSX15.7%
Other35.099999999999994%
Microsegmentation Software
Secure Access Service Edge (SASE) Mindshare Distribution
ProductMindshare (%)
Cloudflare One6.1%
Prisma Access by Palo Alto Networks11.8%
Cato SASE Cloud Platform9.8%
Other72.3%
Secure Access Service Edge (SASE)
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Rapid7 InsightIDR2.1%
Splunk Enterprise Security7.2%
Wazuh5.8%
Other84.9%
Security Information and Event Management (SIEM)
 

Featured Reviews

Ken Bauer - PeerSpot reviewer
Senior Security Analyst at a retailer with 5,001-10,000 employees
Segmentation of legacy systems has protected outdated endpoints and reduces network risk
The best features Akamai Guardicore Segmentation offers make it simple to see all of the connections that are being made to each of the endpoints, and they can be controlled by process and port. The ability to control by process and port helps my team day-to-day because, since there are hundreds of thousands of connections to some of these endpoints, looking at the Reveal Map makes it simple to audit and create rules for what we want to allow. Akamai Guardicore Segmentation has impacted my organization positively because we find it difficult to remove the legacy systems, so it was very important to segment them from the rest of the network to protect them and protect the rest of our network.
CV
Network Architect at IP Dimension
Cloud security has improved remote access and has reduced costs for smaller client sites
I have used Cloudflare One's Identity-Aware Proxy, and it is quite straightforward from what I have seen so far. The app registration on the Azure side integrates fully into Cloudflare, and I am very satisfied with that part because it is easy to set up. The integration of Cloudflare One's Secure Web Gateway and Zero Trust Network Access works without any issues. That part is pretty automatic, and if you complete the rest of the setup, it comes together by itself with no issues from my side. What makes it nice is that we can actually start replacing on-site firewalls at this stage for the smaller clients because it does not matter if they go to a coffee shop or work from home; they are still secured by the same connection. The hops get shorter and you get better latency. We have done testing to see if it is better. One thing that we did notice with our proof of concept with our current client is that they have people connecting from the UK. When they used their previous VPN solution, uploading CAD drawings and other files to the server took a long time. They mentioned that it is much quicker on Cloudflare One's solution. I definitely believe that is part of the improved performance, and I am satisfied with that as well. What is nice about Cloudflare One is that it makes the setup easier and also easier to train technicians to maintain it. Compared to legacy systems, we do not need to get fancy firewalls in place that are costly. That is definitely also a cost-saver with Cloudflare One.
SohailHyder - PeerSpot reviewer
Head Of Cyber Security at Super Secure
Has supported compliance needs for mid-sized organizations but lacks customization and advanced integration
If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is. This is where it can improve if we keep in front the feature sets of a complete SIEM solution. Most common in the market is QRadar, but it is depleting now. It has been taken over by some other products such as Splunk and LogRhythm. If we compare these things with Rapid7 InsightIDR, then there are definitely some gaps that need to be filled. Data retention is also one concern because Rapid7 InsightIDR is cloud-based and operates on a subscription model. Whatever data you want to retain, it has to be paid for separately or it has a cost. Other solutions that are on-premises can have their own infrastructure or they provide some data retention for a month or in some capacity-wise, they provide that solution to them which makes them more attractive.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The real bonus is the fact that we can secure applications, all the way down to the individual services, on each host. It's actually more granular security than we can get out of a traditional firewall."
"In security, there are not many products that can do what Guardicore Centra can do in terms of visibility, seeing what is going on in the server, and using the type of mapping that it gives you with the application."
"Akamai Guardicore Segmentation offers us large visibility in all our environments and helps us to understand network segmentation and traffic."
"The label-based segmentation is the most valuable feature."
"This tool greatly helps in understanding the footprint of the attacks."
"The most valuable features of the solution are the maps and ring fencing that help monitor events."
"Its deception features are great, providing a rich telemetry of lured origins, and are a great resource for any active defense strategy."
"Guardicore Centra offers the best coverage specifically in backward compatibility with legacy operating systems."
"Cloudflare Access is a stable solution."
"Cloudflare is simple to use."
"For Cloudflare Access, I am using the free plan...The most valuable feature is their protection."
"The solution has different options that can be used to differentiate DDoS attacks."
"We mostly use Cloudflare WAF, and gets basic Cloudflaire DDoS, caching as extra bonus . We like the factor these features are all integrated into 1 console, simple to manage."
"What makes it nice is that we can actually start replacing on-site firewalls at this stage for the smaller clients because it does not matter if they go to a coffee shop or work from home; they are still secured by the same connection."
"It's a perfect solution from my perspective; it's easy to understand and easy to configure."
"It's the endpoint exposition. We don't need to expose our VPN server to the internet and need a zero-test solution. I can apply some conditional access to the endpoint that's connecting to our network to check their security policies or the security condition of their workstation. Once the workstation is trying to connect to my internal network, then I would like to check the discrete condition of these endpoints that are trying to access my internal network. We created some conditional access. We have CrowdStrike, to check if the CrowdStrike is installed, to check if it's updated, and to check for Windows updates. We created some conditional policies to check it."
"The UI is very good."
"If you were on other solutions, you would notice that they use agents from third-party, from open-source, from a native OS, or from other tools. Here, however, it is an agent from Rapid7 itself. This adds to the solution's overall capabilities."
"The biggest reason why we chose Rapid7 was to gain value in a really quick time. Its deployment doesn't take months. It just takes a few days."
"During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an application belongs to a known ransomware group. The system rates the threat, offering a clear detection ratio, such as 97 out of 100. It not only identifies threats but also illustrates the associated behaviors, helping us understand the potential risk to a particular endpoint."
"Enables the use of honey pots, honey users, and honey files to monitor for suspicious patterns."
"I've used other products such as QRadar and other SIEM solutions and I find this solution is much more simplified and user-friendly."
"They can subscribe to Rapid7 because it is more valuable and delivers a greater return on investment."
"Great coverage of all systems within our network from endpoint to firewall."
 

Cons

"The product needs a few features like enhanced user policies and payload-level inspection to improve the offering."
"Needs more customization of honeypots and a vaster catalog of systems able to be mimicked."
"The maps could go a bit faster. They are useful but slightly slow."
"They can maybe improve their customer service just because they are kind of a small organization, and customer service isn't as big as others such as VMware."
"Guardicore Centra should incorporate automation so that we don't require to write custom scripts and APIs. The tool also has limitations on rules where it allows only sixty thousand rules. Our clients have also commented that there are too many manual clicks and effort to do changes. I think that the incorporation of automation can help our clients make changes with confidence and without the possibility of human error."
"Kubernetes is not installed in the way we need it."
"Customers would want to see the cost improved."
"Customers would want to see the cost improved."
"Operating and tuning the product is difficult."
"From a logging perspective, it is still a bit difficult to see exactly what users are being blocked with the current views."
"Feedback could be enhanced. While I work efficiently with Clover as a partner in Mexico City, sometimes the information and requests are easier to manage with more concrete solutions."
"I would like them to include a VPN feature to provide a secure connection to the data center."
"The pricing is an area that can be improved. Pricing, as far as I recall, was the source of our problems."
"The response time for support must be reduced."
"Our customers no longer use Cloudflare because its service is subpar."
"Lacks a VPN feature to provide a secure connection to the data center."
"Cloud risk assessment is one area where I think they need a lot of improvement."
"Cloud risk assessment is one area where I think they need a lot of improvement."
"The main problem lies in the processes within the client's operating systems."
"Tenable Nessus is easier to deal with. It's more efficient and accurate. InsightIDR is heavier than Tenable in terms of performance and scanning. Rapid7 would be much easier to use if it had a network connector like Tenable. Tenable's connector allows continuous monitoring over the B caps."
"The solution needs improvement in threat intelligence. Increasing the depth of intelligence to help users understand more about threats is a possibility. My suggestion is to expand access to other websites or resources."
"The searching feature in Rapid7 InsightIDR needs to evolve"
"If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is."
"The dashboard is an area that could be simplified."
 

Pricing and Cost Advice

"The solution is reasonably priced and I would rate it a six out of ten. The tool's licensing costs are yearly."
"The customer would complain about the cost."
"Akamai Guardicore Segmentation is expensive."
"The pricing is too high."
"Guardicore Centra provides better value for money than NSX, was the other solution that we looked at, which was too expensive for what it does."
"Compared to the pricing we were seeing from both Illumio and Edgewise, Guardicore was very competitive."
"GuardiCore has made some new changes to the license now. We've seen monthly and annual licenses based on a subscription. We have a few clients that pay anywhere from $25,000 a year."
"This is not a cheap solution but you have to consider the bigger picture, which is what it is giving you."
"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."
"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."
"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."
"The solution is not that expensive."
"Cloudflare Zero Trust Platform's pricing is good."
"The solution's pricing lacks transparency."
"The prices are slightly expensive."
"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."
"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."
"Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."
"It is a reasonably priced solution."
"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."
"The solution has a mid-range price point in the market"
"The pricing of the solution depends on the user. But there is a yearly licensing cost."
"​Accurately predict your licensing counts as this is a subscription based product.​"
"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."
report
Use our free recommendation engine to learn which Microsegmentation Software solutions are best for your needs.
885,667 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
18%
Computer Software Company
10%
Manufacturing Company
9%
Insurance Company
7%
Construction Company
23%
Comms Service Provider
9%
Computer Software Company
7%
Financial Services Firm
6%
Computer Software Company
10%
Financial Services Firm
9%
Manufacturing Company
8%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise4
Large Enterprise11
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise2
Large Enterprise11
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise5
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for Guardicore Centra?
My experience with pricing, setup cost, and licensing is that overall everything worked out really well. The pricing ...
What needs improvement with Guardicore Infection Monkey?
I think the pricing is very high. It is a big cost. The price of Akamai Guardicore Segmentation is very expensive, bu...
What is your primary use case for Guardicore Infection Monkey?
I use Akamai Guardicore Segmentation to block lateral movement of malicious software like ransomware. This is very im...
What needs improvement with Cloudflare Access?
Cloudflare Access has strong integration with Microsoft, among other platforms. However, when it comes to Kaspersky, ...
What is your primary use case for Cloudflare Access?
Cloudflare Access provides secure access to internal applications for employees, external members of the organization...
What advice do you have for others considering Cloudflare Access?
Cloudflare Access is one of the best integrations available. While about two hundred vendors offer similar services, ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is a...
What needs improvement with Rapid7 InsightIDR?
If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as ...
 

Also Known As

Guardicore Centra, GuardiCore
Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform
InsightIDR
 

Overview

 

Sample Customers

Santander, Frontier Airlines, OpenLink, Intermountain Healthcare, Cellcom, BancoBASE
23andMe
Liberty Wines, Pioneer Telephone, Visier
Find out what your peers are saying about Broadcom, Illumio, Akamai and others in Microsegmentation Software. Updated: March 2026.
885,667 professionals have used our research since 2012.