Try our new research platform with insights from 80,000+ expert users

Exabeam vs Rapid7 InsightIDR vs Splunk User Behavior Analytics comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of August 2025, in the User Entity Behavior Analytics (UEBA) category, the mindshare of Exabeam is 9.5%, up from 9.4% compared to the previous year. The mindshare of Rapid7 InsightIDR is 10.0%, down from 10.5% compared to the previous year. The mindshare of Splunk User Behavior Analytics is 8.9%, down from 10.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Entity Behavior Analytics (UEBA)
 

Featured Reviews

Stephen-Armstrong - PeerSpot reviewer
The SIEM provides a user-friendly UI experience
When events come into the system, the dashboard categorizes them by the highest risk score, not when they appear on the system. When you've got multiple ongoing incidents you can only see the highest risk score at the top of the list rather than the most recent detection. Exabeam's reporting dashboard could have included a filtering option to filter by the most recent detection.
Asim Naeem - PeerSpot reviewer
Providing comprehensive insight into alerts while working towards AI enhancement
I definitely recommend Rapid7 InsightIDR. It is becoming better, with improvements being continuously made to the product. Right now, I do not have any advice about Rapid7 for other users because every organization or user has different criteria or multiple use cases, so I refrain from commenting on that. I rate the overall solution seven out of ten.
Subhayu Chakraborty - PeerSpot reviewer
Automatic reports streamline tasks and offers easy report gathering
The dashboard part could be improved. While using it, I noticed two options: Classic, which is adequate yet only in black and white, and another one that is more advanced or smart, though I forgot the exact term. I encountered several issues while trying to create solutions for this advanced version, which seem unrelated to query or data issues.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Timeline based analysis; good platform support"
"It's a very user-friendly product and it's a very comprehensive technology."
"The way it can connect with AWS is very useful, and the integrations are pretty good."
"Exabeam has improved our organization by speeding up the investigation process."
"The user interface and the timelines they use are the most valuable features. The price model is very simple so that one can understand it easily and there are no surprises within it."
"Exabeam Fusion SIEM has a good performance and more advantages than traditional solutions."
"The solution's automation capabilities are great."
"The most valuable feature of Exabeam is the timeline creation based on log sources, which helps in security investigations."
"The UI is very good."
"I like the tool's user analysis feature."
"The solution is very stable and works very well for what I need it to do."
"Rapid7's reporting is more robust than Tenable's."
"I have seen that Rapid7 InsightIDR provides security to the networks and endpoints in the company."
"Scalability-wise, I rate the solution a ten out of ten. As a cloud tool, the product is highly scalable."
"During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an application belongs to a known ransomware group. The system rates the threat, offering a clear detection ratio, such as 97 out of 100. It not only identifies threats but also illustrates the associated behaviors, helping us understand the potential risk to a particular endpoint."
"Another very important part of insightIDR is the ability to collect data from endpoint devices via agent software. With a large remote workforce, this allows visibility into the endpoints that are connected to the internet, but not to the corporate network."
"The product is at the forefront of auto-remediation networking. It's great."
"Because of some of the visualizations that we utilize, we are able to understand strange, unusual traffic on our networks."
"Features like alerts and auto report generation are valuable."
"The most valuable feature is the ability to search through a large amount of data."
"Splunk User Behavior Analytics is known for its advanced analytics and data correlation capabilities, which help in detecting patterns, anomalies, and security threats."
"The most effective one is the integration with other vendors."
"This is a good security product."
"The solution appears to be stable, although we haven't used it heavily."
 

Cons

"One area for the solution's improvement is integration capabilities, particularly out-of-the-box integration which sometimes requires additional professional services."
"The only problem is that the UI is not very impressive."
"Adding to the number of certifications that they have, for example, ISO 27001, would be helpful."
"Updating the new release of Exabeam Fusion SIEM takes time and slows our performance."
"Exabeam's reporting dashboard could have included a filtering option to filter by the most recent detection."
"We had a large volume right from the beginning and they weren't quite prepared for that. That's something that they should think about when it comes to customers that have a large volume to start off with."
"The organzation is rigid and not flexible in the way they operate"
"Exabeam needs to improve its documentation and provide more customization for dashboards and case management."
"Cloud risk assessment is one area where I think they need a lot of improvement."
"There is a future in AI with Rapid7, however, it is not fully operated. There are certain limitations with Rapid7 that I am working on."
"The interface for doing investigation needs to be enhanced with minor improvements that would make it more useful."
"The searching feature in Rapid7 InsightIDR needs to evolve"
"The solution's XDR agents cannot compete with the XDR solutions out there yet."
"They should add more configuration and security features to it."
"The solution needs improvement in threat intelligence. Increasing the depth of intelligence to help users understand more about threats is a possibility. My suggestion is to expand access to other websites or resources."
"I would like to see more development in InsightIDR towards building their SIEM solution and converting it to XDR."
"We want to have an automated system for bot hunting that enables us to detect anomalies predictively based on historical data. It would be helpful if Splunk included process mining as an alternative option. We have a threat workflow, but it would be useful if we could supplement that with some process mining capabilities over time."
"Enhancing the storage model that they are using is necessary."
"I'm not aware of any lacking features."
"The initial setup was complex because some of the configurations that we required needed customization."
"The ability to do more complicated data investigation would be a welcome addition for pros, though the functionality now gives most people what they need."
"The dashboard part could be improved."
"The correlation engine should have persistent and definable rules."
"In the future I would like to see simplified statistics and analytical threats."
 

Pricing and Cost Advice

"They have a great model for pricing that can be based either on user count or gigabits per day."
"Exabeam is not a cheap solution."
"Exabeam Fusion SIEM's pricing is reasonable."
"There is an annual license required to use Exabeam Fusion SIEM. The price of the solution should be reduced."
"The solution is expensive."
"The platform is not extremely expensive compared to its direct competitors; I would rate its pricing around six out of ten."
"The pricing of the solution depends on the user. But there is a yearly licensing cost."
"The pricing and licensing are competitive."
"Rapid7 InsightIDR's pricing is reasonable."
"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help.​"
"​Accurately predict your licensing counts as this is a subscription based product.​"
"The pricing is good, and it is not very expensive."
"Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs."
"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."
"There are additional costs associated with the integrator."
"I am not aware of the price, but it is expensive."
"I hope we can increase the free license to be more than 5 gig a day. This would help people who want to introduce a POC or a demo license for the solution."
"Pricing varies based on the packages you choose and the volume of your usage."
"The licensing costs is around 10,000 dollars."
"My biggest complaint is the way they do pricing... You can never know the pricing for next year. Every single time you adjust to something new, the price goes up. It's impossible to truly budget for it. It goes up constantly."
report
Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
864,574 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
13%
Manufacturing Company
8%
Government
7%
Computer Software Company
15%
Manufacturing Company
7%
Financial Services Firm
7%
Government
7%
Computer Software Company
17%
Financial Services Firm
11%
Government
9%
University
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendli...
What is your experience regarding pricing and costs for Exabeam Fusion SIEM?
I do not have much information about the pricing. However, I am aware that Exabeam is cheaper than Palo Alto based on...
What needs improvement with Exabeam Fusion SIEM?
We use the on-prem Exabeam product and face limitations using the web UI and administration of custom models and rule...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is a...
What do you like most about Rapid7 InsightIDR?
During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, ...
What do you like most about Splunk User Behavior Analytics?
The solution's most valuable feature is Splunk queries, which allow us to query the logs and analyze the attack vectors.
What is your experience regarding pricing and costs for Splunk User Behavior Analytics?
In terms of setup cost, pricing, and licensing, Splunk User Behavior Analytics is not an inexpensive product. The set...
What needs improvement with Splunk User Behavior Analytics?
There are improvements that could be made to Splunk User Behavior Analytics as any product will have advantages and d...
 

Also Known As

No data available
InsightIDR
Caspida, Splunk UBA
 

Overview

 

Sample Customers

Hulu, ADP, Safeway, BBCN Bank
Liberty Wines, Pioneer Telephone, Visier
8 Securities, AAA Western, AdvancedMD, Amaya, Cerner Corporation, CJ O Shopping, CloudShare, Crossroads Foundation, 7-Eleven Indonesia
Find out what your peers are saying about IBM, Exabeam, Cynet and others in User Entity Behavior Analytics (UEBA). Updated: July 2025.
864,574 professionals have used our research since 2012.