Rapid7 InsightIDR vs SentinelOne Singularity AI SIEM comparison

Why PeerSpot?

Rapid7 and SentinelOne are both solutions in the Security Information and Event Management (SIEM) category. Rapid7 is ranked #22 with an average rating of 7.5, while SentinelOne is ranked #7 with an average rating of 8.5. Rapid7 holds a 2.3% mindshare in SIEM, compared to SentinelOne’s 1.2% mindshare. Additionally, 96% of Rapid7 users are willing to recommend the solution, compared to 100% of SentinelOne users who would recommend it.

Rapid7 InsightIDR

Read 33 Rapid7 InsightIDR reviews

14,864 Views
7,432 Comparison Views

96% willing to recommend

SentinelOne Singularity AI ...

Read 18 SentinelOne Singularity AI SIEM reviews

5,615 Views
4,043 Comparison Views

100% willing to recommend

Rapid7 InsightIDR

SentinelOne Singularity AI ...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Mar 29, 2026

Rapid7 InsightIDR and SentinelOne Singularity AI SIEM compete in the SIEM space. SentinelOne holds an advantage with its comprehensive features, particularly in AI technology, despite its higher costs.

Features: Rapid7 InsightIDR features strong threat detection with pre-built automation, efficient security operations analytics, and notable user behavior analytics. SentinelOne offers AI-driven threat detection, endpoint protection, and HyperAutomation for creating flexible workflows. Its advanced analytics improve response efficiency significantly.

Room for Improvement: Rapid7 InsightIDR could benefit from richer integration with third-party tools, enhanced customization options, and improved incident response times. SentinelOne lacks simpler integration processes, more cost-effective deployment options, and clearer documentation for complex features.

Ease of Deployment and Customer Service: Rapid7 InsightIDR is straightforward to deploy and integrates smoothly with existing systems, coupled with effective customer support. SentinelOne also features efficient deployment and offers detailed onboarding support, although its setup can be complex.

Pricing and ROI: Rapid7 InsightIDR offers more accessible pricing with a balance of cost and functionality, leading to quicker ROI. SentinelOne, with its higher initial costs, provides extensive features that may justify the investment for those focusing on robust security infrastructure.

To learn more, read our detailed Rapid7 InsightIDR vs. SentinelOne Singularity AI SIEM Report (Updated: September 2026).

Buyer's Guide

Rapid7 InsightIDR vs. SentinelOne Singularity AI SIEM

September 2026

Download the complete report

Helped 920,929 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Rapid7 InsightIDR

Ranking in Security Information and Event Management (SIEM)

22nd

Average Rating

8.4

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (11th), Endpoint Detection and Response (EDR) (32nd), Threat Deception Platforms (6th), Extended Detection and Response (XDR) (20th)

SentinelOne Singularity AI ...

Ranking in Security Information and Event Management (SIEM)

7th

Average Rating

8.6

Reviews Sentiment

6.4

Number of Reviews

Ranking in other categories

AI Observability (6th)

Mindshare comparison

As of November 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Rapid7 InsightIDR is 2.3%, down from 2.4% compared to the previous year. The mindshare of SentinelOne Singularity AI SIEM is 1.2%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
SentinelOne Singularity AI SIEM	1.2%
Rapid7 InsightIDR	2.3%
Other	96.5%

Security Information and Event Management (SIEM)

Featured Reviews

Prajwal Chougale

SOC L2 Analyst at a tech services company with 51-200 employees

Centralized threat hunting has improved alert accuracy and simplifies incident investigations

I would say there are two areas for improvement: the reporting dashboard that provides insights or reports weekly or monthly lacks detailed information about how logs are being ingested. While the details are there, they could be more concise and easier to understand for any level of authority. The second area is alert tuning; compared to Microsoft Sentinel, Rapid7 InsightIDR provides fewer alerts with more static alert functionality and lacks dynamic alerting exposures. There could be improvements to learn from past alert activities for more dynamic alert configurations. These two areas are the main areas for improvement; everything else is good.

Read full review

reviewer2915043

System Engineer at a consultancy with 11-50 employees

Centralized monitoring has improved threat detection speed and simplified alert investigations

It would be helpful if some alerts had cleaner, clearer explanations right away, such as suggesting next steps inside the alert, and fewer clicks to get from alert to raw event details would make the triage even faster. Integration could be more plug-and-play, and improving built-in guidance for new analysts would help cut the learning curve. Performance-wise, it is adequate for us, but easier bulk searches would make investigations smoother. It would be helpful for each alert to come with clear suggested next steps right inside the alert, so analysts do not have to guess or click around too much. Making integration more plug-and-play would smooth out setup for new data sources.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"If you were on other solutions, you would notice that they use agents from third-party, from open-source, from a native OS, or from other tools. Here, however, it is an agent from Rapid7 itself. This adds to the solution's overall capabilities."

"Rapid7's reporting is more robust than Tenable's."

"Enables the use of honey pots, honey users, and honey files to monitor for suspicious patterns."

"InsightIDR helps us investigate an environment to discover information about incidents."

"This is a great product and the team is very willing to work with companies."

"Integration with threat modeling from the Metasploit and InsightIDR repositories."

"The solution is very stable and works very well for what I need it to do."

"Great coverage of all systems within our network from endpoint to firewall."

More Rapid7 InsightIDR pros

"When they face attacks such as ransomware and are dissatisfied with their existing solutions, they switch to SentinelOne Singularity AI SIEM, which is quite good in detecting unknown threats, cleaning the system, and handling ransomware."

"AI-powered threat hunting using natural language stands out the most to me because it allows me to investigate security data using plain language questions instead of manually writing complex queries, which reduces the time required for threat hunting and makes investigations more accessible for analysts who are less familiar with query languages."

"SentinelOne Singularity AI SIEM's AI-powered analytics does affect our SOC's ability to reduce false positives; that is one of the biggest advantages because the manpower that I have is limited."

"SentinelOne Singularity AI SIEM has impacted my organization positively because I am observing some improvement, including real-time monitoring and real-time threat detection that help secure both our and the client's organization from anything suspicious or any malicious types of alerts."

"With the help of this tool, the response time to sophisticated threats has improved significantly, and it recently cuts the MTTR time using Purple AI by 40%."

"I assess the overall security posture of our organization after implementing SentinelOne Singularity AI SIEM as significantly improved."

"After using SentinelOne Singularity AI SIEM, it has reduced our incident response time by forty to fifty percent compared to other tools."

"The combination of a clean dashboard and centralized logs is what makes everything faster and less stressful because it gives us confidence that we are not missing something important."

More SentinelOne Singularity AI SIEM pros

Cons

"The reporting is the weakest aspect. There needs to be multi-level grouping for events (for example, group by user and destination). Right now, we can do a group by user and a separate table or group by destination. But I'd be more interested in where a person was logging into instead of who was logging in or where he was logging in."

"I'd like to be able to get the compliance report within the solution which is currently not possible."

"It would be useful to import threat intelligence in YARA format along with known incorrect email addresses."

"The product allows us to make only 30 custom rules."

"I would like the ability to adjust the threshold of certain existing alerts. Currently the only option is to change the notifications or create my own alert."

"The ability to tune the collector for custom logs would greatly help."

"Inability to get access to compliance reports within the solution."

"Lacks a mobile application."

More Rapid7 InsightIDR cons

"SentinelOne Singularity AI SIEM has some performance and reliability issues that need improvement."

"The AI-generated investigations can occasionally require manual validation for complex incidents."

"Another area for improvement is that the product is somewhat expensive. Pricing could be improved as well."

"It is quite good, but the only downside is that it is costly."

"I would want the false positive ratio to be lower and would want to improve that aspect so the true will be more, and the false will be lesser."

"I assess the efficiency of SentinelOne Singularity AI SIEM in improving our responses to sophisticated threats as not having improved a lot because, as I mentioned earlier, there are a few things that need improvement, including the false positive rate."

"There is room for improvement when it comes to the technical support quality and expertise of SentinelOne. Sometimes, the technical support team does not know how to resolve certain issues and takes time to respond, often requiring follow-up interactions within 24 hours."

"While it provides many built-in decorations and dashboards, creating highly customized decoration rules and reports can sometimes require additional efforts."

More SentinelOne Singularity AI SIEM cons

Pricing and Cost Advice

"Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."

"Accurately predict your licensing counts as this is a subscription based product."

"The pricing of the solution depends on the user. But there is a yearly licensing cost."

"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."

"It is more reasonably priced than other vendors."

"Rapid7 InsightIDR charges us based on the endpoints we connect to."

"The solution has a mid-range price point in the market"

"The pricing and licensing are competitive."

More Rapid7 InsightIDR pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

920,929 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

10%

Financial Services Firm

Comms Service Provider

Outsourcing Company

22%

Media Company

Manufacturing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	22
Midsize Enterprise	5
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	6
Large Enterprise	4

Questions from the Community

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

See all answers

What is your experience regarding pricing and costs for Rapid7 InsightIDR?

My experience with pricing, setup costs, and licensing has been very positive; it is cost-effective and offers great value for the money. We bought the licensing through an agent, and the setup was...

See all answers

What needs improvement with Rapid7 InsightIDR?

See all answers

What needs improvement with SentinelOne Singularity AI SIEM?

My impression of the AI-driven threat detection capabilities is that it helps a little bit, but they need to tune it a bit because we are seeing too many false positives recently. Since we are a pa...

See all answers

What is your primary use case for SentinelOne Singularity AI SIEM?

SentinelOne Singularity AI SIEM is a tool that we use to support our clients. Our organization is a service-based organization, so we use SIEM to provide services to software-based clients. We are ...

See all answers

What advice do you have for others considering SentinelOne Singularity AI SIEM?

In my organization, approximately eighty people work with SentinelOne Singularity AI SIEM. Our clients vary in size; we have small businesses, medium enterprises, and large enterprises as well. Sen...

See all answers

Comparisons

Splunk Enterprise Security vs Rapid7 InsightIDR

Compared 5% of the time

Microsoft Sentinel vs Rapid7 InsightIDR

Compared 3% of the time

Adlumin Security Operations vs Rapid7 InsightIDR

Compared 3% of the time

Darktrace vs Rapid7 InsightIDR

Compared 3% of the time

Vectra AI vs Rapid7 InsightIDR

Compared 3% of the time

More Rapid7 InsightIDR Competitors

Microsoft Sentinel vs SentinelOne Singularity AI SIEM

Compared 20% of the time

Fortinet FortiSIEM vs SentinelOne Singularity AI SIEM

Compared 15% of the time

Huntress Managed SIEM vs SentinelOne Singularity AI SIEM

Compared 5% of the time

Huntress Managed EDR vs SentinelOne Singularity AI SIEM

Compared 4% of the time

Axoflow vs SentinelOne Singularity AI SIEM

Compared 2% of the time

More SentinelOne Singularity AI SIEM Competitors

Product Reports

Buyer's Guide

Rapid7 InsightIDR

October 2026

Download Rapid7 InsightIDR product report

Buyer's Guide

SentinelOne Singularity AI SIEM

October 2026

Download SentinelOne Singularity AI SIEM product report

Also Known As

InsightIDR

No data available

Overview

Rapid7 InsightIDR is a cloud-based security information and event management solution known for its user behavior analytics, offering rapid detection and response capabilities while facilitating seamless integration across systems.

Rapid7 InsightIDR is designed to enhance threat detection and investigation through its efficient user behavior analytics and advanced threat intelligence framework. The platform's cloud-based deployment ensures rapid setup and comprehensive event monitoring across diverse IT environments, including endpoints and Office 365. Its intuitive interface supports seamless data collection, honing in on threat detection through honeypot utilization and intelligent alerting. However, it is noted for lacking some customization features and better integration, especially with Microsoft and ITSMs.

What are the key features of Rapid7 InsightIDR?

User Behavior Analytics: Detects threats by analyzing patterns and anomalies.
Cloud Deployment: Enables quick setup and scalability.
Comprehensive Monitoring: Monitors events across systems and platforms like Office 365.
Honeypots and Alerting: Utilizes honeypots to reduce false positives and alert fatigue.
Threat Intelligence Framework: Supports effective threat hunting and remediation.

What benefits should users consider in reviews when evaluating Rapid7 InsightIDR?

Enhanced Detection: Improves threat detection with user behavior analysis.
Easy Integration: Integrates across systems for a streamlined security approach.
Rapid Response: Facilitates quick action against identified threats.
Operational Efficiency: Offers a cohesive view of security operations.

Rapid7 InsightIDR is prominently used in security operation centers to manage events, detect threats, and respond effectively. Industries apply it for network behavior monitoring, compliance, and vulnerability management. Companies integrate it with security tools to boost threat investigation, ensuring full SIEM functionalities and robust log management capacities. Its application spans behavioral and intrusion analytics, aiding in monitoring and addressing malicious activities.

Rapid7

SentinelOne Singularity AI SIEM offers comprehensive security information and incident management designed to enhance threat detection, response, and investigation capabilities within enterprise environments.

SentinelOne Singularity AI SIEM is known for its robust capabilities in the realm of cybersecurity, providing organizations with an advanced tool to combat modern threats. The platform integrates machine learning and artificial intelligence to automate threat identification and streamline incident response processes. Its intuitive interface allows teams to manage security events efficiently, ensuring rapid reaction to potential vulnerabilities. As a scalable tool, it adapts to evolving security demands, providing valuable insights to safeguard critical business operations.

What are the important features of SentinelOne Singularity AI SIEM?

Automated Threat Detection: Uses AI to identify threats with minimal human intervention.
Comprehensive Data Analysis: Capable of processing extensive security-related data for informed decision-making.
Real-time Monitoring: Continuously tracks events for immediate alerts on suspicious activities.
Scalability: Adapts to the changing needs of enterprises, maintaining effectiveness at any scale.
Seamless Integration: Easily connects with existing security infrastructure to enhance overall protection.

What are the key benefits or ROI from SentinelOne Singularity AI SIEM?

Improved Security Posture: Enhances the ability to detect and respond to complex threats, minimizing risks.
Operational Efficiency: Automates routine processes, allowing security teams to focus on strategic tasks.
Cost-effectiveness: Reduces the need for extensive manual analysis, cutting down operational costs.
Business Continuity: Protects critical operations from disruptions, ensuring uninterrupted service delivery.
Scalability and Flexibility: Ensures ongoing adaptability to growing and dynamic security demands.

In industries such as finance and healthcare, implementation of SentinelOne Singularity AI SIEM often means tailored solutions to protect sensitive data, meeting regulatory compliance. These sectors appreciate its capability to provide detailed insights and reduce the risk of data breaches, thus preserving stakeholder trust.

SentinelOne

Sample Customers

Liberty Wines, Pioneer Telephone, Visier

Information Not Available

Buyer's Guide

Rapid7 InsightIDR vs. SentinelOne Singularity AI SIEM

September 2026

Free Report: Rapid7 InsightIDR vs. SentinelOne Singularity AI SIEM

Find out what your peers are saying about Rapid7 InsightIDR vs. SentinelOne Singularity AI SIEM and other solutions. Updated: September 2026.

DOWNLOAD NOW

920,929 professionals have used our research since 2012.

See our Rapid7 InsightIDR vs. SentinelOne Singularity AI SIEM report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.