Rapid7 InsightIDR vs Rapid7 InsightVM comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Rapid7 InsightIDR
Average Rating
8.4
Number of Reviews
31
Ranking in other categories
Security Information and Event Management (SIEM) (9th), User Entity Behavior Analytics (UEBA) (3rd), Endpoint Detection and Response (EDR) (20th), Threat Deception Platforms (5th), Extended Detection and Response (XDR) (13th)
Rapid7 InsightVM
Average Rating
8.0
Number of Reviews
57
Ranking in other categories
Risk-Based Vulnerability Management (4th)
 

Mindshare comparison

As of July 2024, in the Security Information and Event Management (SIEM) category, the mindshare of Rapid7 InsightIDR is 2.4%, down from 2.6% compared to the previous year. The mindshare of Rapid7 InsightVM is 0.4%, down from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM)
Unique Categories:
User Entity Behavior Analytics (UEBA)
15.6%
Endpoint Detection and Response (EDR)
1.1%
Risk-Based Vulnerability Management
15.6%
 

Featured Reviews

BR
Aug 12, 2022
Quick to deploy and helpful in detecting and responding to security incidents before there is a big outage
I used it in my previous company. We were the integrator of the solution, and also a partner of Rapid7 at the time.  We used it for security monitoring and also for analytics. We used it for our own company, and like an MSSP, we sold this to our customers. So, we did security monitoring for our…
SH
Jan 19, 2024
Easy deployment, but technical support could respond faster
The initial setup is not so complex. It is quickly deployable configurable and integrated with your existing setup. The common process for Rapid7 InsightVM involves comparing it against their standard procedures to ensure compliance with the required licenses and resources. Users download the necessary files and initiate/reactivate licenses. Certain configurations are also set up. This process typically takes two to three days for the department, but we usually allocate a week for completion. Our team feels enabled enough after completing the training session on Rapid7 InsightVM. We conduct our tests independently, and whenever we need support, we seek assistance directly from Rapid7. This process isn't overly complex or time-consuming. We ensure thorough preparation by gathering all necessary information, addressing internet concerns, and informing the customer. Once fully prepared, we proceed forward.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution provides satisfying native integration features"
"If you were on other solutions, you would notice that they use agents from third-party, from open-source, from a native OS, or from other tools. Here, however, it is an agent from Rapid7 itself. This adds to the solution's overall capabilities."
"The solution is very stable and works very well for what I need it to do."
"Rapid7 is easy to use and deploy. It is a simple solution and has easy data pulling."
"The incident case management is the most valuable feature. Even though there's always something I find I would like to add to that feature, the ability to quickly sort through all the logs, network and endpoint data, etc., and add it to an incident case as part of the investigation, is nice. Having it automatically timeline that additional data into the original incident timeline, and correlate it to other notable events and activities on the network, results in a huge improvement in our overall confidence that we've quickly traced down the right source of an issue."
"Intelligent alerting to avoid the common problem of alert fatigue associated with traditional SIEMs."
"The alerting to drive investigations and remediation has been its most valuable feature.​"
"Rapid7 InsightIDR integrates well with other solutions. It's also easy to configure because Rapid7 InsightIDR has a lot of instructions posted on their website that customers can follow if they need to get the source log."
"The most important aspect of the solution is that it rarely gives false positives, especially compared to other products. It provides very clear reports for our IT teams to look at."
"It is a stable solution."
"The ease of deployment and configuration allows users to onboard quickly."
"I really love the new platform. It is really easy to understand, use, and deploy."
"It is stable and scalable."
"The remediation project is a pretty effective because it allows us, as clients or countries, to choose specific assets and set limitations on them for a certain period which allows us to track and follow up on those limitations. However, when it comes to real-time monitoring and live dashboards, InsightVM doesn't quite fit the bill. It's not a real-time solution and is not instant."
"One of the most valuable features is it's graphical dashboard feature. It is quite easy to manage the widgets, and we can customize those according to our queries."
"The assessment is most valuable."
 

Cons

"They should add more configuration and security features to it."
"It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required."
"The solution needs improvement in threat intelligence. Increasing the depth of intelligence to help users understand more about threats is a possibility. My suggestion is to expand access to other websites or resources."
"Inability to get access to compliance reports within the solution."
"The searching feature in Rapid7 InsightIDR needs to evolve"
"Sometimes, it is hard to get the right queries to use. Currently, the tool lacks a pre-made set of queries."
"The product allows us to make only 30 custom rules."
"One thing that springs to mind is easier API integration with ITSMs. We are evaluating a new ITSM and I would like to have InsightIDR create a ticket when an attack is identified, and the ticket would be closed in InsightIDR when the ITSM resolution is completed. This would take out the "single point of failure" we currently have, if the email recipient is somehow absent, in recording the risk appetite for the incident and the actions taken to mitigate or not."
"The reporting is a little bit tricky because it can be difficult to exactly pinpoint some of the assets to filter them and generate a report."
"They should integrate the solution with multiple products."
"There should be containerization within the VM."
"The InsightVM cannot scan if we connect to our customer by the VPN."
"There is a significant learning curve, that non-technical individuals, especially those not specialized in computer science or the information security industry, might face."
"There are certain limitations because of the product being used on a hybrid model. Rapid7 InsightVM doesn't offer a solution purely in the cloud."
"The on-premise updates could improve from Rapid7 InsightVM."
"Some of our customers want to be completely cloud based, and Rapid7 doesn't offer this as an option."
 

Pricing and Cost Advice

"The pricing of the solution depends on the user. But there is a yearly licensing cost."
"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."
"It is more reasonably priced than other vendors."
"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help.​"
"Rapid7 InsightIDR charges us based on the endpoints we connect to."
"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."
"Rapid7 InsightIDR's pricing is reasonable."
"Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."
"Comparing the price with the value that we receive, I am not happy with it."
"We purchase annual licenses."
"The tool's price is neither too high nor too low. My company needs to pay 65,000 per year. There are no additional costs apart from the licensing fees attached to the solution."
"The product is cheaper than the other similar tools available in the market."
"InsightVM is an expensive product, especially compared to its competitors, at around a million NOK per year."
"Its licensing is yearly. Everything is included in the price for one year."
"Licensing fees are paid on a yearly basis."
"It is less expensive compared to other competitors."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
793,295 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Manufacturing Company
8%
Financial Services Firm
8%
Government
7%
Educational Organization
36%
Computer Software Company
11%
Financial Services Firm
8%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What do you like most about Rapid7 InsightIDR?
During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...
How would you choose between Rapid7 InsightVM and Tenable Nessus?
You have full visibility across cloud, network, virtual, and containerized infrastructures with Rapid7 Insight VM. You can easily prioritize vulnerabilities using attacker analytics. Overall, Rapid...
What do you like most about Rapid7 InsightVM?
The product's initial setup phase was very easy.
What is your experience regarding pricing and costs for Rapid7 InsightVM?
The product is cheaper than the other similar tools available in the market.
 

Also Known As

InsightIDR
InsightVM, NeXpose
 

Learn More

 

Overview

 

Sample Customers

Liberty Wines, Pioneer Telephone, Visier
ACS, Acosta, AllianceData, amazon.com, biogen idec, CBRE, CATERPILLAR, Deloitte, COACH, GameStop, IBM
Find out what your peers are saying about Splunk, Microsoft, Wazuh and others in Security Information and Event Management (SIEM). Updated: July 2024.
793,295 professionals have used our research since 2012.