Aruba IntroSpect vs Rapid7 InsightIDR comparison

Cancel
You must select at least 2 products to compare!
HPE Aruba Networking Logo
235 views|147 comparisons
100% willing to recommend
Rapid7 Logo
1,845 views|958 comparisons
95% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Aruba IntroSpect and Rapid7 InsightIDR based on real PeerSpot user reviews.

Find out what your peers are saying about IBM, Splunk, Rapid7 and others in User Entity Behavior Analytics (UEBA).
To learn more, read our detailed User Entity Behavior Analytics (UEBA) Report (Updated: April 2024).
769,662 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"Roaming feature, application control and firewall features.""The most valuable feature is the end-user monitoring. If there is any abnormal behavior on the machine, the administrator will be alerted.""I haven't heard of any issues with stability."

More Aruba IntroSpect Pros →

"Very intuitive and easy to set up.""The incident case management is the most valuable feature. Even though there's always something I find I would like to add to that feature, the ability to quickly sort through all the logs, network and endpoint data, etc., and add it to an incident case as part of the investigation, is nice. Having it automatically timeline that additional data into the original incident timeline, and correlate it to other notable events and activities on the network, results in a huge improvement in our overall confidence that we've quickly traced down the right source of an issue.""Log search allows us to dive deep into aggregated logs and query all event types at once.​""It is a very stable solution.""The web interface is great — very useful and user-friendly.""The log aggregation and storage provided by InsightIDR has shown no issues with scalability; aggregating over one hundred millions events daily.""Intelligent alerting to avoid the common problem of alert fatigue associated with traditional SIEMs.""​​User behavioral analytics allows us to pinpoint abnormal or suspicious behavior among millions of events every day."

More Rapid7 InsightIDR Pros →

Cons
"I would like to see improvements made to the dashboard, where you can get the information with a simple click.""The packet analyzer needs improvement.""Technical support is a little slow."

More Aruba IntroSpect Cons →

"The ability to tune the collector for custom logs would greatly help.""The solution's XDR agents cannot compete with the XDR solutions out there yet.""The product allows us to make only 30 custom rules.""It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required.""InsightIDR's integration with other solutions could be improved. Also, I'd like more control from the portal over what's happening on the endpoint side. For example, when I see an attack on an endpoint, I want to be able to stop it from the portal.""I would like to see more development in InsightIDR towards building their SIEM solution and converting it to XDR.""Inability to get access to compliance reports within the solution.""Rapid7 doesn't integrate well with all our security tools from various vendors, so we plan to switch. Many of our solutions work with Rapid7, but some do not. We are already searching for a replacement already."

More Rapid7 InsightIDR Cons →

Pricing and Cost Advice
  • "The license is based on the number of users. The evaluation license is free, you can download it from the website and try it out first."
  • More Aruba IntroSpect Pricing and Cost Advice →

  • "​I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability.​"
  • "The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help.​"
  • "Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."
  • "​Accurately predict your licensing counts as this is a subscription based product.​"
  • "The pricing and licensing are competitive."
  • "Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."
  • "It is a reasonably priced solution."
  • "It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."
  • More Rapid7 InsightIDR Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
    769,662 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Aruba Introspect has two licenses - advanced and standard. While we found the price of the advanced license to be a bit high, the standard license is reasonably priced and costs less than half the… more »
    Top Answer:For tools I’d recommend:  -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also,… more »
    Top Answer:During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an application… more »
    Top Answer:We chose Rapid7 because of its price. IBM QRadar charges us based on data storage. Rapid7 InsightIDR charges us based on the endpoints we connect to. We are satisfied with the product’s price.
    Ranking
    Views
    235
    Comparisons
    147
    Reviews
    0
    Average Words per Review
    0
    Rating
    N/A
    Views
    1,845
    Comparisons
    958
    Reviews
    10
    Average Words per Review
    415
    Rating
    8.2
    Comparisons
    Also Known As
    IntroSpect
    InsightIDR
    Learn More
    Overview

    Aruba IntroSpect is a User Behavior Analytics (UEBA) tool that uses supervised and unsupervised machine learning to automatically baseline user and device behavior while actively looking for anomalous activity that may indicate a threat. The solution detects compromised users’ systems by identifying changes in typical IT access and usage. By accelerating alert prioritization, incident investigation, and threat-hunting efforts, Aruba IntroSpect can automate the detection of attacks and risky behaviors. In addition, the solution allows security teams to stay ahead of malicious activity and also insecure or negligent users, so they can manage threats before they become damaging. Aruba IntroSpect is suitable for IT organizations of every size and enables businesses to easily and rapidly scale machine-learned behavior detection from small projects to full enterprise deployments.

    Aruba IntroSpect can detect:

    • Account abuse
    • Account takeover
    • Command and control
    • Data exfiltration
    • Lateral movement
    • Password sharing
    • Privilege escalation
    • Flight risk
    • Phishing
    • Ransomware

    Aruba IntroSpect Deployment Options

    • On-premise VM or appliance for Packet Processor
    • AWS or on-premise deployment for Analyzer

    Aruba IntroSpect Data Sources

    The IntroSpect platform can process data sources, including:

    • VPN, FW, IPS/IDS, web proxy, email logs
    • NTA sources: Packets and NetFlow
    • DNS logs
    • Active Directory logs
    • DHCP logs
    • External threat feeds
    • Alerts from third-party security infrastructure

    Aruba IntroSpect Features

    Aruba IntroSpect has many valuable key features. Some of the most useful ones include:

    • Advanced analytics
    • 100+ supervised and unsupervised machine learning models
    • Continuously updated risk scoring
    • Accelerated investigations
    • Packets
    • Flows
    • Logs and alerts
    • Enterprise scale
    • Spark/Hadoop platform

    Aruba IntroSpect Benefits

    There are many benefits to implementing Aruba IntroSpect. Some of the biggest advantages the solution offers include:

    • Fast deployment: Besides having different options for deployment (on-prem or cloud), the solution offers a standalone or integrated platform. For fast deployment, users can ingest data natively or from SIEM, log management, or a packet broker.
    • Efficient: The Aruba IntroSpect solution reduces the time and effort that is required to understand, diagnose, and respond to an attack.
    • Deep insights: Security teams can triage better, make more informed decisions, and respond before damage occurs.
    • Machine learning-based analytics: The solution builds baselines for normal behavior of both individual entities and groups by continuously monitoring IT activities.
    • Comprehensive security profile: When users implement Aruba IntroSpect, they gain access to a security profile with continuous risk scoring and enriched security information.
    • Automatic risk profiles: Aruba IntroSpect automatically creates a risk profile for every user, system, and IoT device connected to the network, saving users an additional step.
    • Proactive threat hunting: Through its query interface, Aruba IntroSpect proactively spots threats without the overhead of finding, searching, and summarizing isolated data stores.
    • Prioritize security risks: Risk scores are based on machine learning that can account for key factors like the order and time of incidents across various attack stages as well as time since detection and business context. Accurate, normalized scores mean security analysts can confidently prioritize their efforts.
    • Instant visibility: When using the solution, users get instant visibility to high-risk activity. Aruba IntroSpect provides access to complete investigative records.

    Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

    Sample Customers
    Sage Hotel, Centara Hotels and Resorts, Asda, The Dolder Grand,
    Liberty Wines, Pioneer Telephone, Visier
    Top Industries
    VISITORS READING REVIEWS
    Computer Software Company15%
    Retailer9%
    Construction Company8%
    Educational Organization7%
    REVIEWERS
    Comms Service Provider21%
    Computer Software Company21%
    Non Tech Company14%
    Security Firm14%
    VISITORS READING REVIEWS
    Computer Software Company15%
    Manufacturing Company8%
    Financial Services Firm8%
    Government6%
    Company Size
    VISITORS READING REVIEWS
    Small Business49%
    Midsize Enterprise10%
    Large Enterprise41%
    REVIEWERS
    Small Business61%
    Midsize Enterprise21%
    Large Enterprise18%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise20%
    Large Enterprise54%
    Buyer's Guide
    User Entity Behavior Analytics (UEBA)
    April 2024
    Find out what your peers are saying about IBM, Splunk, Rapid7 and others in User Entity Behavior Analytics (UEBA). Updated: April 2024.
    769,662 professionals have used our research since 2012.

    Aruba IntroSpect is ranked 24th in User Entity Behavior Analytics (UEBA) while Rapid7 InsightIDR is ranked 3rd in User Entity Behavior Analytics (UEBA) with 29 reviews. Aruba IntroSpect is rated 8.6, while Rapid7 InsightIDR is rated 8.4. The top reviewer of Aruba IntroSpect writes "A straightforward setup for technical users and an overall good product". On the other hand, the top reviewer of Rapid7 InsightIDR writes "An affordable product that is easy to use and has many advanced features and default templates". Aruba IntroSpect is most compared with Arista NDR, Cisco Secure Network Analytics, LogRhythm UEBA, Darktrace and SolarWinds NetFlow Traffic Analyzer, whereas Rapid7 InsightIDR is most compared with Darktrace, Microsoft Sentinel, Splunk Enterprise Security, Rapid7 InsightVM and IBM Security QRadar.

    See our list of best User Entity Behavior Analytics (UEBA) vendors.

    We monitor all User Entity Behavior Analytics (UEBA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.