No more typing reviews! Try our Samantha, our new voice AI agent.

Exabeam vs Rapid7 InsightIDR vs Splunk User Behavior Analytics comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of April 2026, in the User Entity Behavior Analytics (UEBA) category, the mindshare of Exabeam is 8.6%, down from 8.8% compared to the previous year. The mindshare of Rapid7 InsightIDR is 4.3%, down from 10.5% compared to the previous year. The mindshare of Splunk User Behavior Analytics is 5.7%, down from 9.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Entity Behavior Analytics (UEBA) Mindshare Distribution
ProductMindshare (%)
Exabeam8.6%
Splunk User Behavior Analytics5.7%
Rapid7 InsightIDR4.3%
Other81.4%
User Entity Behavior Analytics (UEBA)
 

Featured Reviews

DH
Solution Architect at CTC
Improved threat detection has provided clear user risk insights and streamlined incident response
Exabeam's UEBA is the most valuable feature that I have found so far. Exabeam's UEBA displays the type of description that it could show in a console regarding one particular user, the rating that it shows, and how vulnerable the user is, which is very good. Exabeam's automation for incident response is very good. The machine learning capabilities of Exabeam are also good.
SohailHyder - PeerSpot reviewer
Head Of Cyber Security at Super Secure
Has supported compliance needs for mid-sized organizations but lacks customization and advanced integration
If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is. This is where it can improve if we keep in front the feature sets of a complete SIEM solution. Most common in the market is QRadar, but it is depleting now. It has been taken over by some other products such as Splunk and LogRhythm. If we compare these things with Rapid7 InsightIDR, then there are definitely some gaps that need to be filled. Data retention is also one concern because Rapid7 InsightIDR is cloud-based and operates on a subscription model. Whatever data you want to retain, it has to be paid for separately or it has a cost. Other solutions that are on-premises can have their own infrastructure or they provide some data retention for a month or in some capacity-wise, they provide that solution to them which makes them more attractive.
SK
Enterprise Architect at Wipro Limited
Offers intuitive deployment with strong customer support and advanced analytics features
There are improvements that could be made to Splunk User Behavior Analytics as any product will have advantages and disadvantages. Scalability is one consideration. For example, the advantages include rapid auto scaling to meet demand. A disadvantage is that it can lead to cost overrun if not properly factored or governed. The speed of deployment offers faster provisioning as an advantage, but it can require substantial automation skills and infrastructure as code expertise, which can be challenging. Cloud provides major operational benefits such as agility, automation, resilience, and global access when setting up on Cloud. However, it introduces challenges such as cost control, complexity, and vendor dependency. For example, global reach allows deployment of apps and services closer to users worldwide, but data sovereignty concerns exist and region selection must align with compliance requirements.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Exabeam includes machine learning features and out-of-the-box rules that we rely on."
"The setup is not difficult. It was easy."
"The ThreatHunter in Advanced Analytics is the most valuable. It helps analyze compromised assets and provides analysis for any entity within my client's environment."
"Exabeam has improved our organization by speeding up the investigation process."
"The most valuable feature of Exabeam Fusion SIEM is the easy-to-use user interface."
"The user interface and the timelines they use are the most valuable features, and the price model is very simple so that one can understand it easily and there are no surprises within it."
"We evaluated LogRhythm and Splunk as possible options but in the end, we went with Exabeam - it was the right choice for us taking into account the needs of our customers and projected future needs."
"The most valuable feature of Exabeam Fusion SIEM is the easy-to-use user interface."
"Features for user behavior analytics and the rules for attack review are good."
"Very intuitive and easy to set up."
"I rate Rapid7 nine out of 10 for affordability"
"The solution is easy to use, and the interface is intuitive."
"The alerting to drive investigations and remediation has been its most valuable feature, plus the ability to quickly search multiple logs makes investigations easier."
"InsightIDR has allowed us to find potential security issues that we did not know existed, and get remediation quickly."
"Great coverage of all systems within our network from endpoint to firewall."
"Integration with threat modeling from the Metasploit and InsightIDR repositories."
"The solution is definitely scalable."
"Splunk is a very powerful platform; when it comes to functionality and ease of use, Splunk is one of the market leaders in this area."
"The automation is very good; the product is at the forefront of auto-remediation networking and the pricing of the solution is very reasonable."
"The solution's most valuable feature is Splunk queries, which allow us to query the logs and analyze the attack vectors."
"In Egypt, we have phones that provide wide internet services to the customer and the customer wants to know what the customer satisfaction and service was, then they post on their Facebook or Twitter page to measure the customer satisfaction and after one or two days they start to take the comments and they enter these comments to Splunk and the UBA starts to make correlations and analytics on this data, and finally, the managers or the decision maker get the results, which is wonderful, and the customer is satisfied."
"Splunk User Behavior Analytics is known for its advanced analytics and data correlation capabilities, which help in detecting patterns, anomalies, and security threats."
"The dashboards are one of the very core functions of Splunk User Behavior Analytics; they are very good in dashboarding, and the dashboards themselves are nice, very good, and very helpful."
"The product is at the forefront of auto-remediation networking. It's great."
 

Cons

"I believe if it were more flexible it would be a better product."
"Updating the new release of Exabeam Fusion SIEM takes time and slows our performance."
"Exabeam needs to improve its adaptive nature towards rules and its capability to understand the entire client environment faster."
"The solution's reporting and dashboarding could be improved."
"They should provide detailed information about detecting phishing emails."
"They need to focus on more of the MITRE ATT&CK Framework and coverage. They claim they cover about 70 to 80%. I'm not sure if it's really quite that much, however."
"The product is good but the organization is rigid and not flexible in the way they operate."
"The initial setup of Exabeam Fusion SIEM is complex because it needs to integrate with the SIEM solution, but after this is complete it is straightforward."
"One thing that springs to mind is easier API integration with ITSMs. We are evaluating a new ITSM and I would like to have InsightIDR create a ticket when an attack is identified, and the ticket would be closed in InsightIDR when the ITSM resolution is completed. This would take out the "single point of failure" we currently have, if the email recipient is somehow absent, in recording the risk appetite for the incident and the actions taken to mitigate or not."
"There is a future in AI with Rapid7, however, it is not fully operated. There are certain limitations with Rapid7 that I am working on."
"The product allows us to make only 30 custom rules."
"Rapid7 doesn't integrate well with all our security tools from various vendors, so we plan to switch. Many of our solutions work with Rapid7, but some do not. We are already searching for a replacement already."
"Needs a better ability to customize the check within the console."
"InsightIDR is only available in a cloud version. Some of our customers prefer an on-prem solution because they want to manage the security within their environment."
"The interface for doing investigation needs to be enhanced with minor improvements that would make it more useful."
"The integration capabilities of the solution have certain shortcomings where improvements are required."
"The initial setup was complex because some of the configurations that we required needed customization."
"The solution is much more expensive than relative competitors like ArcSight or LogRhythm. It makes it hard to sell to customers sometimes."
"A disadvantage is that it can lead to cost overrun if not properly factored or governed."
"In the future I would like to see simplified statistics and analytical threats."
"I think they could have a built-in user behavior analytics engine, and more advanced artificial intelligence features as well."
"I would like improved downward integration with other tools such as McAfee and other GCP solutions."
"The machine learning algorithm in Splunk User Behavior Analytics is actually the core thing that needs to be updated because this feeds all the other functions inside it."
"In the future I would like to see simplified statistics and analytical threats, as well as a more user-friendly interface for dashboards."
 

Pricing and Cost Advice

"The platform is not extremely expensive compared to its direct competitors; I would rate its pricing around six out of ten."
"The solution is expensive."
"They have a great model for pricing that can be based either on user count or gigabits per day."
"Exabeam is not a cheap solution."
"There is an annual license required to use Exabeam Fusion SIEM. The price of the solution should be reduced."
"Exabeam Fusion SIEM's pricing is reasonable."
"The pricing of the solution depends on the user. But there is a yearly licensing cost."
"It is a reasonably priced solution."
"The pricing is good, and it is not very expensive."
"It is more reasonably priced than other vendors."
"Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs."
"The pricing and licensing are competitive."
"​Accurately predict your licensing counts as this is a subscription based product.​"
"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help.​"
"I hope we can increase the free license to be more than 5 gig a day. This would help people who want to introduce a POC or a demo license for the solution."
"The licensing costs is around 10,000 dollars."
"Pricing varies based on the packages you choose and the volume of your usage."
"I am not aware of the price, but it is expensive."
"My biggest complaint is the way they do pricing... You can never know the pricing for next year. Every single time you adjust to something new, the price goes up. It's impossible to truly budget for it. It goes up constantly."
"There are additional costs associated with the integrator."
report
Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
885,789 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
8%
Manufacturing Company
8%
Construction Company
7%
Computer Software Company
9%
Financial Services Firm
9%
Manufacturing Company
8%
Government
6%
Financial Services Firm
10%
Computer Software Company
9%
Government
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise4
Large Enterprise7
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise5
Large Enterprise6
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise6
Large Enterprise12
 

Questions from the Community

What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendli...
What is your experience regarding pricing and costs for Exabeam Fusion SIEM?
I do not have much information about the pricing. However, I am aware that Exabeam is cheaper than Palo Alto based on...
What needs improvement with Exabeam Fusion SIEM?
Exabeam's integration capabilities are not good, as Exabeam has a very limited number of integrations and no out-of-b...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is a...
What needs improvement with Rapid7 InsightIDR?
If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as ...
What do you like most about Splunk User Behavior Analytics?
The solution's most valuable feature is Splunk queries, which allow us to query the logs and analyze the attack vectors.
What is your experience regarding pricing and costs for Splunk User Behavior Analytics?
Splunk User Behavior Analytics is a premium product. Compared to all other products in the market, it is the most exp...
What needs improvement with Splunk User Behavior Analytics?
Splunk User Behavior Analytics is still an immature product, so it still needs some R&D to be able to be mature i...
 

Also Known As

No data available
InsightIDR
Caspida, Splunk UBA
 

Overview

 

Sample Customers

Hulu, ADP, Safeway, BBCN Bank
Liberty Wines, Pioneer Telephone, Visier
8 Securities, AAA Western, AdvancedMD, Amaya, Cerner Corporation, CJ O Shopping, CloudShare, Crossroads Foundation, 7-Eleven Indonesia
Find out what your peers are saying about Exabeam, IBM, Cynet and others in User Entity Behavior Analytics (UEBA). Updated: March 2026.
885,789 professionals have used our research since 2012.