Rapid7 InsightIDR vs Symantec Endpoint Detection and Response comparison

Rapid7 InsightIDR vs. Symantec Endpoint Detection and Response

Download the complete report

Helped 884,976 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Rapid7 InsightIDR is 1.2%, up from 1.0% compared to the previous year. The mindshare of Symantec Endpoint Detection and Response is 0.7%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
Rapid7 InsightIDR	1.2%
Symantec Endpoint Detection and Response	0.7%
Other	94.7%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

SohailHyder

Head Of Cyber Security at Super Secure

Has supported compliance needs for mid-sized organizations but lacks customization and advanced integration

If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is. This is where it can improve if we keep in front the feature sets of a complete SIEM solution. Most common in the market is QRadar, but it is depleting now. It has been taken over by some other products such as Splunk and LogRhythm. If we compare these things with Rapid7 InsightIDR, then there are definitely some gaps that need to be filled. Data retention is also one concern because Rapid7 InsightIDR is cloud-based and operates on a subscription model. Whatever data you want to retain, it has to be paid for separately or it has a cost. Other solutions that are on-premises can have their own infrastructure or they provide some data retention for a month or in some capacity-wise, they provide that solution to them which makes them more attractive.

Read full review

Hamid Harroud

IT Director at Al Akhawayn University

A highly stable and affordable solution for detecting and preventing security threats

The solution needs to provide better integration. We may receive things from email, network, or the machine itself. So we need a centralized system to get alerts or messages which are not available in the product. The solution must provide features to centralize the alerts received. It should provide integration with other Symantec products.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The positive impacts I see from Cortex XDR by Palo Alto Networks include a complete 360-degree view of our security posture altogether, being a uniform platform where we are ingesting logs from multiple resources."

"It's very stable. I've never experienced downtime for the ASM console or ASM core."

"It blocks malicious files. It prevents attacks. It doesn't require many updates, it's a very light application."

"From the Palo Alto side, whatever they buy, they integrate that really well into their integration suite, and that makes a massive difference."

"After deploying Traps, we saw the performance of the network improve by 65 to 70 percent."

"From a single pane of glass, you can easily manage all of your endpoints."

"Monitoring is most valuable."

"The most valuable feature of Cortex XDR by Palo Alto Networks is the low consumption of system resources. The solution uses a lot of AI and machine learning."

More Cortex XDR by Palo Alto Networks pros

"Intelligent alerting to avoid the common problem of alert fatigue associated with traditional SIEMs."

"Simple configuration and automatically syncs to the cloud platform."

"The incident case management is the most valuable feature, and the ability to quickly sort through all the logs, network and endpoint data, and add it to an incident case as part of the investigation, with automatic timelining and correlation to other notable events and activities on the network, results in a huge improvement in our overall confidence that we have quickly traced down the right source of an issue."

"The solution provides satisfying native integration features"

"Enables the use of honey pots, honey users, and honey files to monitor for suspicious patterns."

"The UI is very good."

"Log search allows us to dive deep into aggregated logs and query all event types at once."

"It gives all the advantages of a SIEM, however, using clever AI, it looks for patterns of behavior rather than just flooding me with all the alerts."

More Rapid7 InsightIDR pros

"I like Symantec EDR's device control and USB security features."

"I would definitely recommend Symantec because the company provides great support from its engineers."

"The most valuable feature is that the same agent can act as the endpoint detection and response agent."

"The solution does all that we expect it to do."

"Overall, I think that this product runs quite smoothly and I definitely can recommend it."

"The most valuable features are that it is easy to connect and global settings are good."

"The most valuable features of the solution are that it is easy to use and has good support."

"A great feature of this solution is that it is very well-integrated with antivirus software. Other ADR solutions are implemented as single technologies and are not integrated with the provider, but Symantec offers AV plus ADR."

More Symantec Endpoint Detection and Response pros

Cons

"Cortex XDR should have a lightweight agent, and the agent size should not be heavy."

"As an improvement, I would like to see enhanced connection speeds."

"There are some default policies which sometimes affect our applications and cause them to run around. In the hotel industry, we use a different type of data versus Oracle and SQL. By default, there are some policies which stop us from running properly. Because of this, the support level is also not that strong. We have to wait to get a results."

"Whenever the tool releases a new version when deploying the product across the organization, I feel like there are some disturbances in the CPU usage after upgrading the tool to the latest version."

"Cortex XDR could improve its sales support team, including better commission structures and referral programs."

"It should support more mobile operating systems. That is one of the cons of their infrastructure right now."

"If you compare it to SentinelOne, which has more functionalities and detection capabilities on an open platform, the pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks."

"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."

More Cortex XDR by Palo Alto Networks cons

"The integration capabilities of the solution have certain shortcomings where improvements are required."

"They should add more configuration and security features to it."

"Lacks a mobile application."

"The ability to tune the collector for custom logs would greatly help."

"Customised alert recipients need to be added to allow better first-line action and quicker response."

"I feel it would greatly benefit from more supported log sources."

"The searching feature in Rapid7 InsightIDR needs to evolve"

"Customised alert recipients need to be added to allow better first-line action and quicker response. Configurable honeypots would be a welcome addition."

More Rapid7 InsightIDR cons

"It is not possible to buy it from the company itself, or resellers in other countries. If it is available, I see that it is offered as part of a larger service. For me, this was not suitable."

"In the future, it would be nice to have playbooks in the tool, to allow for some of the common activities to be automated. For example, some of the scannings of the malware can be too manual for a specific device. Additionally, a vulnerability manager would be beneficial."

"Its UI could be more user-friendly."

"One potential area for improvement in Symantec EDR is the reporting engine."

"Symantec Endpoint Detection and Response could improve the reporting. It is very difficult to create reports from the user interface."

"Technical support is not as good as we expect, and resolving problems should be more timely."

"It would be beneficial to have more integration and compatibility with other platforms."

"They do need to minimize the number of agents installed on a server."

More Symantec Endpoint Detection and Response cons

Pricing and Cost Advice

"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."

"I don't have any issues with the pricing. We are satisfied with the price."

"Its pricing is kind of in line with its competitors and everybody else out there."

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

"I am using the Community edition."

"It's about $55 per license on a yearly basis."

"It has a yearly renewal."

"The price was fine."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The pricing is good, and it is not very expensive."

"The pricing of the solution depends on the user. But there is a yearly licensing cost."

"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."

"It is more reasonably priced than other vendors."

"I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability."

"The solution has a mid-range price point in the market"

"Accurately predict your licensing counts as this is a subscription based product."

"Rapid7 InsightIDR charges us based on the endpoints we connect to."

More Rapid7 InsightIDR pricing and cost advice

"Compared to the tools of competitors, Symantec Endpoint Detection and Response is a cheaply priced product."

"The price is reasonable."

"Symantec Endpoint Detection and Response is expensive."

"We pay around $100,000 for 5000 licenses every year."

"We have a yearly subscription, and the pricing is fair."

"We are satisfied with the pricing."

"The product is cheap."

"The price is really high and it should be lower."

More Symantec Endpoint Detection and Response pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

884,976 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

Manufacturing Company

Financial Services Firm

Comms Service Provider

Computer Software Company

10%

Financial Services Firm

Manufacturing Company

Government

Manufacturing Company

Comms Service Provider

Financial Services Firm

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	5
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	7
Large Enterprise	9

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is a...

What is your experience regarding pricing and costs for Rapid7 InsightIDR?

The product pricing is very cheap.

What needs improvement with Rapid7 InsightIDR?

If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as ...

What is your experience regarding pricing and costs for Symantec Endpoint Detection and Response?

I am not aware of the pricing details, as that falls under the management's responsibility.

What needs improvement with Symantec Endpoint Detection and Response?

While the prices for technical issues in Symantec Endpoint Detection and Response are good, as a partner of Symantec,...

What is your primary use case for Symantec Endpoint Detection and Response?

Different companies such as banks and local government in Poland use Symantec Endpoint Detection and Response because...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Microsoft Sentinel vs Rapid7 InsightIDR

Compared 5% of the time

Splunk Enterprise Security vs Rapid7 InsightIDR

Compared 5% of the time

Rapid7 InsightVM vs Rapid7 InsightIDR

Compared 4% of the time

CrowdStrike Falcon vs Rapid7 InsightIDR

Compared 4% of the time

Darktrace vs Rapid7 InsightIDR

Compared 3% of the time

More Rapid7 InsightIDR Competitors

CrowdStrike Falcon vs Symantec Endpoint Detection and Response

Compared 7% of the time

Kaspersky Endpoint Detection and Response Expert vs Symantec Endpoint Detection and Response

Compared 7% of the time

Microsoft Defender for Endpoint vs Symantec Endpoint Detection and Response

Compared 7% of the time

Trellix Endpoint Security Platform vs Symantec Endpoint Detection and Response

Compared 6% of the time

Fortinet FortiEDR vs Symantec Endpoint Detection and Response

Compared 6% of the time

More Symantec Endpoint Detection and Response Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Rapid7 InsightIDR

Download Rapid7 InsightIDR product report

Symantec Endpoint Detection and Response

February 2026

Symantec Endpoint Detection and Response report

Download Symantec Endpoint Detection and Response product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

InsightIDR

No data available

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

Rapid7

Symantec Endpoint Detection and Response (EDR) is a powerful security solution designed to help organizations proactively detect, investigate, and mitigate advanced threats across their endpoint environments. As part of Broadcom's cybersecurity portfolio, Symantec EDR provides comprehensive visibility into endpoint activities, enabling security teams to quickly identify and respond to threats that evade traditional defenses.

Symantec EDR leverages machine learning, behavioral analysis, and global threat intelligence from Symantec's vast network to detect sophisticated threats, including zero-day attacks, ransomware, and advanced persistent threats (APTs). This allows organizations to identify malicious activities early and respond swiftly to mitigate potential damage. The solution offers automated response options that enable security teams to contain and remediate threats quickly.

Symantec EDR provides detailed forensic capabilities, allowing security analysts to dive deep into endpoint data, investigate incidents thoroughly, and understand the scope and impact of attacks. Features such as timeline analysis, incident graphing, and the ability to isolate endpoints enhance investigative efforts and support effective remediation strategies.

With its centralized management console, Symantec EDR offers visibility across the entire endpoint environment, regardless of the operating systems or whether endpoints are on-premise or remote. Symantec EDR seamlessly integrates with other Symantec security solutions, enhancing its detection capabilities and enabling a unified approach to threat management. Its scalable architecture ensures that businesses of all sizes can benefit from its advanced security features without compromising performance.

Quickly discover and resolve threats with deep endpoint visibility and superior detection analytics, reducing mean time to remediation. Overcome cyber security skills shortages and streamline SOC operations with extensive automation and built-in integrations for sandboxing, SIEM, and orchestration.

Fortify security teams with the unmatched expertise and global scale of Symantec Managed Endpoint Detection and Response services.
Roll out Endpoint Detection and Response (EDR) across Windows, macOS, and Linux devices using Symantec Endpoint Protection (SEP)-integrated EDR or a dissolvable agent.

Broadcom

Sample Customers

CBI Health Group, University Honda, VakifBank

Liberty Wines, Pioneer Telephone, Visier

Information Not Available

Rapid7 InsightIDR vs. Symantec Endpoint Detection and Response