Rapid7 InsightIDR vs Sumo Logic Security comparison

Rapid7 and Sumo Logic are both solutions in the Security Information and Event Management (SIEM) category. Rapid7 is ranked #15 with an average rating of 7.8, while Sumo Logic is ranked #32 with an average rating of 7.3. Rapid7 holds a 2.3% mindshare in SIEM, compared to Sumo Logic’s 1.2% mindshare. Additionally, 96% of Rapid7 users are willing to recommend the solution, compared to 91% of Sumo Logic users who would recommend it.

Rapid7 InsightIDR

Read 32 Rapid7 InsightIDR reviews

6,567 Views
3,152 Comparison Views

96% willing to recommend

Sumo Logic Security

Read 21 Sumo Logic Security reviews

2,140 Views
1,434 Comparison Views

91% willing to recommend

Rapid7 InsightIDR

Sumo Logic Security

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Sumo Logic Security and Rapid7 InsightIDR compete in the security analytics and threat detection category. Based on the results, Rapid7 InsightIDR seems to have the upper hand due to its comprehensive features, although Sumo Logic Security's integration capabilities are highly valued in certain environments.

Features: Sumo Logic Security is valued for its real-time analytics, integration with multiple data sources, and scalability. Rapid7 InsightIDR stands out with incident response automation, comprehensive threat intelligence, and proactive threat management through automated responses.

Room for Improvement: Sumo Logic Security needs to enhance its alerting system, incident management workflows, and user interface. Rapid7 InsightIDR requires better scalability, more in-depth reporting features, and an easier setup process for some environments.

Ease of Deployment and Customer Service: Sumo Logic Security offers a straightforward deployment process and reliable support, though the initial setup can be complex. Rapid7 InsightIDR's deployment is praised for its simplicity, and its customer support is highly responsive.

Pricing and ROI: Sumo Logic Security is cost-effective with a favorable ROI but has a high initial setup cost. Rapid7 InsightIDR users consider the solution worth its higher price due to superior features and better long-term ROI.

To learn more, read our detailed Rapid7 InsightIDR vs. Sumo Logic Security Report (Updated: December 2025).

Buyer's Guide

Rapid7 InsightIDR vs. Sumo Logic Security

December 2025

Download the complete report

Helped 879,310 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Rapid7 InsightIDR

Ranking in Security Information and Event Management (SIEM)

15th

Average Rating

8.4

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (6th), Endpoint Detection and Response (EDR) (23rd), Threat Deception Platforms (4th), Extended Detection and Response (XDR) (17th)

Sumo Logic Security

Ranking in Security Information and Event Management (SIEM)

32nd

Average Rating

8.4

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Log Management (40th), Security Orchestration Automation and Response (SOAR) (20th)

Mindshare comparison

As of December 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Rapid7 InsightIDR is 2.3%, down from 2.6% compared to the previous year. The mindshare of Sumo Logic Security is 1.2%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Market Share Distribution
Product	Market Share (%)
Rapid7 InsightIDR	2.3%
Sumo Logic Security	1.2%
Other	96.5%

Security Information and Event Management (SIEM)

Featured Reviews

SohailHyder

Head of Cyber Security at Super Secure

Has supported compliance needs for mid-sized organizations but lacks customization and advanced integration

If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is. This is where it can improve if we keep in front the feature sets of a complete SIEM solution. Most common in the market is QRadar, but it is depleting now. It has been taken over by some other products such as Splunk and LogRhythm. If we compare these things with Rapid7 InsightIDR, then there are definitely some gaps that need to be filled. Data retention is also one concern because Rapid7 InsightIDR is cloud-based and operates on a subscription model. Whatever data you want to retain, it has to be paid for separately or it has a cost. Other solutions that are on-premises can have their own infrastructure or they provide some data retention for a month or in some capacity-wise, they provide that solution to them which makes them more attractive.

Read full review

Shay Chouker

CSO at Altera

Has improved implementation speed and coverage but lacks contextual accuracy in alerts

One major improvement I would suggest for Sumo Logic Security is in its risk-based alerting system; while it initially sounds clever and modern, it works as a point-based system where an IP address or entity gets points for bad actions, raising alerts when enough points are collected. This can lead to alerts that are collections of disjointed signals that sometimes make no sense and lack real context; this simplistic approach makes it hard to find coherent stories during investigations. To improve in the support area, I recommend enhancing the technical part because, while the process is good, the actual quality may depend on the personnel involved.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Intelligent alerting to avoid the common problem of alert fatigue associated with traditional SIEMs."

"Rapid7 InsightIDR integrates well with other solutions. It's also easy to configure because Rapid7 InsightIDR has a lot of instructions posted on their website that customers can follow if they need to get the source log."

"The log aggregation and storage provided by InsightIDR has shown no issues with scalability; aggregating over one hundred millions events daily."

"The solution's initial setup is easy."

"I like that it's a cloud-based solution."

"Rapid7 is easy to use and deploy. It is a simple solution and has easy data pulling."

"InsightIDR’s ability to process millions of transactions per day, and to notify me of the most critical ones, is priceless. InsightIDR has the alerts tuned, and has the ability to quickly drill down to determine the threat level."

"The biggest reason why we chose Rapid7 was to gain value in a really quick time. Its deployment doesn't take months. It just takes a few days."

More Rapid7 InsightIDR pros

"The tool has key features like operability. It will alert the admins whenever a device is onboarded."

"We can integrate threat intelligence solutions into the product."

"Scalability has been good for our needs. We haven't run into any scaling issues in regards to size so far."

"The solution is quite stable."

"It provides easy visibility. I also like the shareable queries because we share a lot across groups."

"The features I found valuable with the Sumo Logic Security solution are the search option and the ability to customize the search for the information in the logs."

"The features I find most useful in Sumo Logic Security are the ease of implementation and connectors; they have a very easy connection and many connectors to important systems, making it very easy to implement and fast to start running in production."

"I have no concerns about the stability of the product. I feel it handles the stress we put on it very well."

More Sumo Logic Security pros

Cons

"Currently, it lacks the functionalities provided by Rapid7's User Behavior Analytics (UBA)."

"Needs a better ability to customize the check within the console."

"The product allows us to make only 30 custom rules."

"There is a future in AI with Rapid7, however, it is not fully operated. There are certain limitations with Rapid7 that I am working on."

"InsightIDR's integration with other solutions could be improved. Also, I'd like more control from the portal over what's happening on the endpoint side. For example, when I see an attack on an endpoint, I want to be able to stop it from the portal."

"The main problem lies in the processes within the client's operating systems."

"It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required."

"Customised alert recipients need to be added to allow better first-line action and quicker response. Configurable honeypots would be a welcome addition."

More Rapid7 InsightIDR cons

"This can lead to alerts that are collections of disjointed signals that sometimes make no sense and lack real context; this simplistic approach makes it hard to find coherent stories during investigations."

"There needs to be improvement on imported data which can be used within Sumo Logic to do more advanced queries."

"We would like the ability to drill down into a dashboard and get into deeper levels."

"The initial setup is the most stressful, like learning how to use it."

"We would like to have some type of predefined setup for the logs, making the setup easier by default."

"The dashboard has room for improvement, because sometimes it is a difficult to create a specific dashboard or query. This would be a nice place to correct problems."

"If you want to up your subscription through the AWS Marketplace, it can be difficult. You can't just go back to the AWS Marketplace, and say, "I want a bigger one now." You have to contact the sales team, then they do it on the back-end. This could definitely be improved."

"From the network segmentation side, there is some discrepancy in log onboarding. The tool needs to improve direct API integrations, login integration, native login integration, etc."

More Sumo Logic Security cons

Pricing and Cost Advice

"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help."

"I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability."

"Rapid7 InsightIDR charges us based on the endpoints we connect to."

"It is a reasonably priced solution."

"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."

"The solution has a mid-range price point in the market"

"It is more reasonably priced than other vendors."

"Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs."

More Rapid7 InsightIDR pricing and cost advice

"The pricing is good. It's not an issue for us."

"The pricing is a little high, but for the features that we receive from Sumo Logic, it suits the price. For some small organizations, the price might be a little high."

"Pricing has been cheaper than some of the competing tools, like Splunk."

"The AWS Marketplace pricing is borderline. Every annual renewal, we always contemplate if we are getting what we think we could out of it or could we do it cheaper with some other product."

"Purchasing the solution through the AWS Marketplace is very easy."

"I don't pay the bill. I've heard the AWS Marketplace pricing is high, but I like the value."

"The price scaling comes in a bit expensive."

"Purchasing Sumo Logic through the AWS Marketplace was a simple step."

More Sumo Logic Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

879,310 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Financial Services Firm

Manufacturing Company

Government

Manufacturing Company

13%

Computer Software Company

10%

Financial Services Firm

Educational Organization

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	5
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	3
Large Enterprise	13

Questions from the Community

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

See all answers

What do you like most about Rapid7 InsightIDR?

During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...

See all answers

What is your experience regarding pricing and costs for Rapid7 InsightIDR?

The product pricing is very cheap.

See all answers

What do you like most about Sumo Logic Security?

Sumo Logic Security is a good solution for searching the logs and identifying the issues.

See all answers

What is your experience regarding pricing and costs for Sumo Logic Security?

The pricing structure for Sumo Logic Security is based on two elements: data storage and the number of scans. This makes it more cost-effective because other solutions often include a third element...

See all answers

What needs improvement with Sumo Logic Security?

See all answers

Comparisons

Rapid7 InsightVM vs Rapid7 InsightIDR

Compared 7% of the time

Microsoft Sentinel vs Rapid7 InsightIDR

Compared 7% of the time

Splunk Enterprise Security vs Rapid7 InsightIDR

Compared 5% of the time

Darktrace vs Rapid7 InsightIDR

Compared 5% of the time

CrowdStrike Falcon vs Rapid7 InsightIDR

Compared 5% of the time

More Rapid7 InsightIDR Competitors

Panther vs Sumo Logic Security

Compared 10% of the time

Splunk Enterprise Security vs Sumo Logic Security

Compared 9% of the time

Microsoft Sentinel vs Sumo Logic Security

Compared 7% of the time

Wazuh vs Sumo Logic Security

Compared 5% of the time

Sentinel vs Sumo Logic Security

Compared 3% of the time

More Sumo Logic Security Competitors

Product Reports

Buyer's Guide

Rapid7 InsightIDR

December 2025

Download Rapid7 InsightIDR product report

Buyer's Guide

Sumo Logic Security

December 2025

Download Sumo Logic Security product report

Also Known As

InsightIDR

No data available

Overview

Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

Rapid7

Sumo Logic

Sumo Logic is a cloud-based machine data analytics company focusing on security, operations, and BI use cases. It provides log management and analytics services that leverage machine-generated big data to deliver real-time IT insights.

Sumo Logic is developed as a SaaS solution, it processes and analyzes large quantities of IT infrastructure data, spotting patterns and anomalies that can indicate a potential threat or significant event.

The platform is designed to help IT, security, and business operations teams develop, manage, and secure their applications and cloud infrastructures. It collects, aggregates, and analyzes data from various sources including servers, virtual machines, and network devices, providing visibility into complex systems.

What are the key features of Sumo Logic?

Real-time Analytics: Continuous queries and live dashboards that provide insights into application performance, user behavior, and security threats.
Advanced Machine Learning: Utilizes machine learning algorithms to identify trends, anomalies, and patterns.
Integrated Threat Intelligence: Tools and workflows to enhance security postures by detecting threats and anomalies.
Multi-tenant Cloud Service: Allows users to operate in a shared cloud environment securely.

The solution aims to simplify data complexity, streamline operations, and provide actionable insights to businesses across various industries.

Sumo Logic is designed to handle high data volumes from multiple sources without diminishing performance. It is primarily deployed in the cloud with seamless integrations for AWS, Google Cloud, and Microsoft Azure. This flexibility allows users to leverage Sumo Logic’s capabilities regardless of their existing cloud infrastructure.

In summary, Sumo Logic is a comprehensive, AI-driven analytics solution ideal for businesses looking to enhance their IT and security operations through data-driven insights and real-time monitoring. Its flexible deployment options and scalable pricing model make it accessible for various business sizes and sectors.

Sumo Logic

Sample Customers

Liberty Wines, Pioneer Telephone, Visier

Information Not Available

Buyer's Guide

Rapid7 InsightIDR vs. Sumo Logic Security

December 2025

Free Report: Rapid7 InsightIDR vs. Sumo Logic Security

Find out what your peers are saying about Rapid7 InsightIDR vs. Sumo Logic Security and other solutions. Updated: December 2025.

DOWNLOAD NOW

879,310 professionals have used our research since 2012.

See our Rapid7 InsightIDR vs. Sumo Logic Security report.

See our list of best Security Information and Event Management (SIEM) vendors and best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.