Try our new research platform with insights from 80,000+ expert users

Rapid7 InsightIDR vs USM Anywhere comparison

Rapid7 and LevelBlue are both solutions in the Security Information and Event Management (SIEM) category. Rapid7 is ranked #13 with an average rating of 8.2, while LevelBlue is ranked #30 with an average rating of 7.3. Rapid7 holds a 2.5% mindshare in SIEM, compared to LevelBlue’s 0.9% mindshare. Additionally, 95% of Rapid7 users are willing to recommend the solution, compared to 92% of LevelBlue users who would recommend it.
Rapid7 InsightIDR
Read 32 Rapid7 InsightIDR reviews
  • 4,038 Views
  • 2,556 Comparison Views
95% willing to recommend
USM Anywhere
Read 115 USM Anywhere reviews
  • 1,986 Views
  • 1,353 Comparison Views
92% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Sep 9, 2024

USM Anywhere and Rapid7 InsightIDR compete in the comprehensive security information and event management (SIEM) solutions category. Rapid7 InsightIDR holds an edge due to its advanced threat detection capabilities despite its higher pricing.

Features: USM Anywhere offers unified management of multiple security capabilities, intuitive workflows, and streamlined operations. Rapid7 InsightIDR includes advanced threat detection, user behavior analytics, and robust integration capabilities.

Room for Improvement: USM Anywhere could benefit from more in-depth reporting options, enhanced automation, and improved data insights. Rapid7 InsightIDR requires better support for custom log ingestion, more flexible reporting tools, and greater customization options.

Ease of Deployment and Customer Service: USM Anywhere is praised for straightforward deployment and strong support. Rapid7 InsightIDR integrates easily with existing infrastructures but has mixed reviews on customer service.

Pricing and ROI: USM Anywhere is cost-effective, providing a good balance of features for the price, ensuring strong ROI. Rapid7 InsightIDR, though higher in cost, delivers significant returns with its advanced capabilities, making the higher initial investment worthwhile.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Rapid7 InsightIDR vs. USM Anywhere Report (Updated: April 2025).
Buyer's Guide
Rapid7 InsightIDR vs. USM Anywhere
April 2025
Download the complete report
Helped 850,760 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Rapid7 InsightIDR
Ranking in Security Information and Event Management (SIEM)
13th
Ranking in Endpoint Detection and Response (EDR)
24th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
32
Ranking in other categories
User Entity Behavior Analytics (UEBA) (3rd), Threat Deception Platforms (5th), Extended Detection and Response (XDR) (15th)
USM Anywhere
Ranking in Security Information and Event Management (SIEM)
30th
Ranking in Endpoint Detection and Response (EDR)
51st
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
115
Ranking in other categories
Log Management (44th), Compliance Management (12th)
 

Mindshare comparison

As of May 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Rapid7 InsightIDR is 2.5%, down from 2.7% compared to the previous year. The mindshare of USM Anywhere is 0.9%, down from 1.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM)
 

Featured Reviews

Asim Naeem - PeerSpot reviewer
Providing comprehensive insight into alerts while working towards AI enhancement
I definitely recommend Rapid7 InsightIDR. It is becoming better, with improvements being continuously made to the product. Right now, I do not have any advice about Rapid7 for other users because every organization or user has different criteria or multiple use cases, so I refrain from commenting on that. I rate the overall solution seven out of ten.
Read full review
Kris Nawani - PeerSpot reviewer
Offers complete coverage without the need to install additional software
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Rapid7 InsightIDR integrates well with other solutions. It's also easy to configure because Rapid7 InsightIDR has a lot of instructions posted on their website that customers can follow if they need to get the source log."
"The ability to ingest Office 365 log files, then process them into events and display them on a map."
"I am able to run automated actions based on the output of reports, leaving me extra time to focus on more pressing matters."
"Dashboards, including the main screen, provide much-needed information at a glance, without hours of coding and sifting through logs to find it. In case of an actual security incident, I have faith that insightIDR has retained all logs in a secure manner that prevents log tampering as well."
"The alerting to drive investigations and remediation has been its most valuable feature.​"
"The web interface is great — very useful and user-friendly."
"It improved my organization by building a security alerting program."
"Very intuitive and easy to set up."
More Rapid7 InsightIDR pros
"The solution has all the features that we need, however they do not work correctly."
"It has streamlined log aggregation and analysis to meet organizational and regulatory needs."
"AlienVault has an advanced component within one package. With this, we can cover more area with one solution."
"It has allowed us to see what is happening on our servers."
"The dashboards are very descriptive and contain just the right amount of information. The activity alarms and events contain a plethora of data that is very descriptive and useful."
"AlientVault has helped us in improving our visualization and incident response during cybersecurity situations."
"Any unusual behaviour, we can monitor. We have alerts set up to be sent when we receive signs of any unusual behaviour."
"This solution can completely detect and prevent incidents on your network."
More USM Anywhere pros
 

Cons

"It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required."
"I would like to see more development in InsightIDR towards building their SIEM solution and converting it to XDR."
"They should add more configuration and security features to it."
"Inability to get access to compliance reports within the solution."
"Rapid7 InsightIDR is not intuitive to search for logs. It should be more user-friendly and improve the dashboards. We should be able to use ready-made templates instead of having to build one."
"There is a future in AI with Rapid7, however, it is not fully operated. There are certain limitations with Rapid7 that I am working on."
"One of the things that could be better is digital forensics. It is there, but it can be better. They could provide more on the endpoint detection level."
"InsightIDR is only available in a cloud version. Some of our customers prefer an on-prem solution because they want to manage the security within their environment."
More Rapid7 InsightIDR cons
"The AT&T AlienVault USM is okay, but the relational database is not very good for large amounts of data. For example, many logs cannot be processed. It has been very slow for the queries and some data which are large, it is not very good in this case."
"Sometimes the log is unclear, and the report is a bit ambiguous."
"I'd like to see a dashboard that's a little more descriptive."
"I've been told that AlienVault doesn't have a full version of NES running in there, but I'm not sure if that's accurate or if my engineer made it that way. I'm not sure he was completely honest either because we had NES in the environment before. Those tools could be improved because AlienVault is a SIEM, and it added all these other features."
"The solution is a bit complicated. It could be simplified quite a bit."
"We develop additional rules and scripts to make it more usable."
"There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks."
"The vulnerability scanning feature is one of the areas where the product has certain shortcomings and needs to improve. The tool has vulnerability scanning, but it is not that efficient."
More USM Anywhere cons
 

Pricing and Cost Advice

"Rapid7 InsightIDR is priced very well and is cost-effective."
"The pricing of the solution depends on the user. But there is a yearly licensing cost."
"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."
"​I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability.​"
"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help.​"
"Rapid7 InsightIDR's pricing is reasonable."
"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."
"The pricing is good, and it is not very expensive."
More Rapid7 InsightIDR pricing and cost advice
"It is affordable, and it also has many features that the premium products such as ArcSight and QRadar have. It is a very good platform for a SIEM solution. Everything is included in the price."
"It is a product that is priced in a medium range, making it neither a cheap nor a costly product."
"AlienVault is flexible on their pricing for unlimited licenses."
"Negotiate the best package for your environment."
"It's affordable for most customers."
"​The price point is good.​"
"I don't think the product's pricing is a good value because they try to raise the price 50 percent every year... AlienVault needs to understand that not all customers are huge enterprises... Their sales team is way too aggressive. The price they advertise is not always the price you get."
"They charge a license based on the storage. ATT AlienVault USM is a less expensive solution than IBM QRadar."
More USM Anywhere pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
See recommendations
850,760 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
9%
Manufacturing Company
7%
Government
7%
Computer Software Company
20%
Financial Services Firm
9%
Comms Service Provider
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
See all answers
What do you like most about Rapid7 InsightIDR?
During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...
See all answers
What is your experience regarding pricing and costs for Rapid7 InsightIDR?
The product pricing is very cheap.
See all answers
What do you like most about AT&T AlienVault USM?
The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful.
See all answers
What is your experience regarding pricing and costs for AT&T AlienVault USM?
The pricing is amazing and really cheap.
See all answers
What needs improvement with AT&T AlienVault USM?
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.
See all answers
 

Comparisons

Darktrace vs Rapid7 InsightIDR Logo
Darktrace vs Rapid7 InsightIDR
Compared 10% of the time
Microsoft Sentinel vs Rapid7 InsightIDR Logo
Microsoft Sentinel vs Rapid7 InsightIDR
Compared 9% of the time
Rapid7 InsightVM vs Rapid7 InsightIDR Logo
Rapid7 InsightVM vs Rapid7 InsightIDR
Compared 8% of the time
CrowdStrike Falcon vs Rapid7 InsightIDR Logo
CrowdStrike Falcon vs Rapid7 InsightIDR
Compared 5% of the time
Splunk Enterprise Security vs Rapid7 InsightIDR Logo
Splunk Enterprise Security vs Rapid7 InsightIDR
Compared 5% of the time
More Rapid7 InsightIDR Competitors
AlienVault OSSIM vs USM Anywhere Logo
AlienVault OSSIM vs USM Anywhere
Compared 26% of the time
Splunk Enterprise Security vs USM Anywhere Logo
Splunk Enterprise Security vs USM Anywhere
Compared 13% of the time
Wazuh vs USM Anywhere Logo
Wazuh vs USM Anywhere
Compared 11% of the time
IBM Security QRadar vs USM Anywhere Logo
IBM Security QRadar vs USM Anywhere
Compared 9% of the time
CrowdStrike Falcon vs USM Anywhere Logo
CrowdStrike Falcon vs USM Anywhere
Compared 8% of the time
More USM Anywhere Competitors
 

Product Reports

Buyer's Guide
Rapid7 InsightIDR
April 2025
Rapid7 InsightIDR reportDownload Rapid7 InsightIDR product report
Buyer's Guide
USM Anywhere
April 2025
USM Anywhere reportDownload USM Anywhere product report
 

Also Known As

InsightIDR
AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity
 

Overview

Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

Rapid7

USM Anywhere centralizes security monitoring of networks and devices in the cloud, on premises, and in remote locations, helping you to detect threats virtually anywhere.

Discover

  • Network asset discovery
  • Software & services discovery
  • AWS asset discovery
  • Azure asset discovery
  • Google Cloud Platform asset discovery

Analyze

  • SIEM event correlation, auto-prioritized alarms
  • User activity monitoring
  • Up to 90-days of online, searchable events

Detect

  • Cloud intrusion detection (AWS, Azure, GCP)
  • Network intrusion detection (NIDS)
  • Host intrusion detection (HIDS)
  • Endpoint Detection and Response (EDR)

Respond

  • Forensics querying
  • Automate & orchestrate response
  • Notifications and ticketing

Assess

  • Vulnerability scanning
  • Cloud infrastructure assessment
  • User & asset configuration
  • Dark web monitoring

Report

  • Pre-built compliance reporting templates
  • Pre-built event reporting templates
  • Customizable views and dashboards
  • Log storage
LevelBlue
 

Sample Customers

Liberty Wines, Pioneer Telephone, Visier
Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom
Buyer's Guide
Rapid7 InsightIDR vs. USM Anywhere
April 2025
Free Report: Rapid7 InsightIDR vs. USM Anywhere
Find out what your peers are saying about Rapid7 InsightIDR vs. USM Anywhere and other solutions. Updated: April 2025.
DOWNLOAD NOW
850,760 professionals have used our research since 2012.
See our Rapid7 InsightIDR vs. USM Anywhere report.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.