Hunters vs Rapid7 InsightIDR comparison

Hunters and Rapid7 are both solutions in the Security Information and Event Management (SIEM) category. Hunters is ranked #36 with an average rating of 8.0, while Rapid7 is ranked #21 with an average rating of 7.8. Additionally, 100% of Hunters users are willing to recommend the solution, compared to 96% of Rapid7 users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Hunters and Rapid7 InsightIDR based on real PeerSpot user reviews.

Find out what your peers are saying about Splunk, Wazuh, IBM and others in Security Information and Event Management (SIEM).

To learn more, read our detailed Security Information and Event Management (SIEM) Report (Updated: March 2026).

Buyer's Guide

Security Information and Event Management (SIEM)

March 2026

Download the complete report

Helped 885,789 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

VikramSingh8

Security Delivery Manager at Accenture

Advanced detectors streamline threat monitoring with many use cases

Hunter support is functional yet not exceptional. Their support engineers could be more advanced and faster in providing solutions. Their turnaround time could improve to match other tools. When feedback is provided, they consider it and indicate if it is in the development stage. They commit to fixing bugs and developing the module or feature, however, take quite a lot of time. I would rate their customer support as needing improvement. Another area needing improvement is integration capabilities, as they are not yet fully compatible. Users still have to rely on third-party software or integration tools. Furthermore, they should incorporate more GenAI capabilities, a current buzzword, and enable predictive use cases. Their tools should be capable of reading the environment, making adaptations, and automatically tweaking settings as per client or environmental needs, similar to capabilities provided by other SIEM tools.

Read full review

SohailHyder

Head Of Cyber Security at Super Secure

Has supported compliance needs for mid-sized organizations but lacks customization and advanced integration

If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is. This is where it can improve if we keep in front the feature sets of a complete SIEM solution. Most common in the market is QRadar, but it is depleting now. It has been taken over by some other products such as Splunk and LogRhythm. If we compare these things with Rapid7 InsightIDR, then there are definitely some gaps that need to be filled. Data retention is also one concern because Rapid7 InsightIDR is cloud-based and operates on a subscription model. Whatever data you want to retain, it has to be paid for separately or it has a cost. Other solutions that are on-premises can have their own infrastructure or they provide some data retention for a month or in some capacity-wise, they provide that solution to them which makes them more attractive.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We use Cortex XDR by Palo Alto Networks for its ability to detect based on behavior rather than simple virus scan to prevent malicious activities."

"The product is very good, it has caught a lot of exploits that most products would not."

"I generally believe that Cortex XDR by Palo Alto Networks is probably the best in the market right now."

"Cortex XDR features advanced threat detection capabilities."

"The stability of the solution is very good, we have about 100 users on it right now, and we use it twice a week."

"It has pretty much everything we need and works well within the Palo Alto ecosystem."

"The scalability of Cortex XDR by Palo Alto Networks is very good."

"We have found in our test Cortex XDR by Palo Alto Networks to be a very good tool."

More Cortex XDR by Palo Alto Networks pros

"Hunter proactively provides a set of five to six hundred use cases, categorized based on cloud use cases, endpoint use cases, parameter use cases, and malicious use cases."

"Other SIEM tools base their license cost on the volume of data processed, often charging by how much TB or GB data is processed. Hunter, however, charges based on the number of data sources and the number of data entities integrated, which saves money."

"The technical support is a solid 10 out of 10 as they take the time to answer any questions or problems which may arise in a reasonable time frame."

"InsightIDR has allowed us to find potential security issues that we did not know existed, and get remediation quickly."

"The solution is very stable and works very well for what I need it to do."

"Scalability-wise, I rate the solution a ten out of ten. As a cloud tool, the product is highly scalable."

"I rate Rapid7 nine out of 10 for affordability"

"The product works well. Stability-wise, I rate the solution a ten out of ten."

"Previously, when something happened, such as when a hacker was attacking one of our customers, we were always behind, or we did not know that we were hacked until the ransomware started, but with the Rapid7 solution, at every step, we could online see what a person was doing, and we could prevent ransomware."

"InsightIDR’s ability to process millions of transactions per day, and to notify me of the most critical ones, is priceless. InsightIDR has the alerts tuned, and has the ability to quickly drill down to determine the threat level."

More Rapid7 InsightIDR pros

Cons

"The solution lacks real-time, on-demand antivirus."

"I would like to see some additional features related to email protection included."

"They've been having some issues with updating their endpoint agents, and it has been quite frustrating."

"When it comes to core analysis, and security analysis, Cortex needs to provide more information."

"Cortex XDR is trickier to configure than other Palo Alto products. This is one area where we are not so satisfied."

"I would like to see them include NDR (Network Detection Response)."

"However, if you do not have Palo Alto in your environment, you are paying these additional services just for Cortex XDR by Palo Alto Networks, so it is not a cost-effective solution."

"The setup is quite easy. We had appropriate support from the manager. One thing that was missing was the integration part."

More Cortex XDR by Palo Alto Networks cons

"Hunter support is functional yet not exceptional. Their support engineers could be more advanced and faster in providing solutions."

"Hunter support is functional yet not exceptional."

"Personally, I feel it would greatly benefit from more supported log sources."

"Rapid7 doesn't integrate well with all our security tools from various vendors, so we plan to switch. Many of our solutions work with Rapid7, but some do not. We are already searching for a replacement already."

"There are certain limitations with Rapid7 that I am working on."

"One thing that springs to mind is easier API integration with ITSMs."

"Needs a better ability to customize the check within the console."

"I'd like to see a mobile application included and some feature related to the generality of segregation for internal users that access the application."

"Sometimes, it is hard to get the right queries to use. Currently, the tool lacks a pre-made set of queries."

"Customised alert recipients need to be added to allow better first-line action and quicker response. Configurable honeypots would be a welcome addition."

More Rapid7 InsightIDR cons

Pricing and Cost Advice

"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."

"The tool's price is moderate."

"Our customers have expressed that the price is high."

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."

"The pricing is okay, although direct support can be expensive."

"I don't like that they have different types of licenses."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"The cost depends on your chosen license type, like Pro or other licenses."

More Cortex XDR by Palo Alto Networks pricing and cost advice

Information not available

"The pricing and licensing are competitive."

"Rapid7 InsightIDR is priced very well and is cost-effective."

"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."

"It is a reasonably priced solution."

"Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs."

"Rapid7 InsightIDR charges us based on the endpoints we connect to."

"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."

"It is more reasonably priced than other vendors."

More Rapid7 InsightIDR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

885,789 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

14%

Financial Services Firm

12%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Computer Software Company

Construction Company

Non Profit

Computer Software Company

Financial Services Firm

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	48

No data available

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	5
Large Enterprise	6

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What needs improvement with Hunters?

Hunter support is functional yet not exceptional. Their support engineers could be more advanced and faster in provid...

See all answers

What is your primary use case for Hunters?

Hunter is a very new SIEM in the market. It is definitely a broad market for us as they are trying to establish a new...

See all answers

What advice do you have for others considering Hunters?

Their knowledge base is good. When starting with Hunter, ensure you have one or two sessions to understand navigation...

See all answers

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is a...

See all answers

What is your experience regarding pricing and costs for Rapid7 InsightIDR?

The product pricing is very cheap.

See all answers

What needs improvement with Rapid7 InsightIDR?

If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as ...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 8% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Anomali vs Hunters

Compared 16% of the time

Huntress Managed SIEM vs Hunters

Compared 15% of the time

Anvilogic vs Hunters

Compared 13% of the time

Panther vs Hunters

Compared 8% of the time

Cynet vs Hunters

Compared 8% of the time

More Hunters Competitors

Microsoft Sentinel vs Rapid7 InsightIDR

Compared 4% of the time

Splunk Enterprise Security vs Rapid7 InsightIDR

Compared 4% of the time

CrowdStrike Falcon vs Rapid7 InsightIDR

Compared 3% of the time

Rapid7 InsightVM vs Rapid7 InsightIDR

Compared 3% of the time

Adlumin Security Operations vs Rapid7 InsightIDR

Compared 3% of the time

More Rapid7 InsightIDR Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

April 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Security Information and Event Management (SIEM)

March 2026

Download Hunters product report

Buyer's Guide

Rapid7 InsightIDR

March 2026

Download Rapid7 InsightIDR product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Hunters.AI

InsightIDR

Interactive Demo

Demo not available

Palo Alto Networks

Hunters

Demo not available

Rapid7

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Hunters Security Operations Platform is a Human-Driven, AI-Powered SIEM alternative that revolutionize the way SOCs operate. Hunters automates the entire TDIR process, replacing repetitive human work with machine-powered detection, enrichment, correlation, prioritization and investigation, freeing analysts to proactively protect their organizations. Hunters utilizes an open security data lake architecture, ensuring complete and cost effective coverage of the entire security stack.

Hunters

Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

Rapid7

Sample Customers

CBI Health Group, University Honda, VakifBank

We're happy to support organizations like Booking.com, ChargePoint, Yext, Red Ventures and Cimpress who leverage Hunters SOC Platform to transform their security teams' operations.

Liberty Wines, Pioneer Telephone, Visier

Buyer's Guide

Security Information and Event Management (SIEM)

March 2026

Download Free Report

Find out what your peers are saying about Splunk, Wazuh, IBM and others in Security Information and Event Management (SIEM). Updated: March 2026.

DOWNLOAD NOW

885,789 professionals have used our research since 2012.

See our list of best Security Information and Event Management (SIEM) vendors and best Extended Detection and Response (XDR) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.