Try our new research platform with insights from 80,000+ expert users

Rapid7 InsightIDR vs Symantec Endpoint Detection and Response comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Rapid7 InsightIDR
Ranking in Endpoint Detection and Response (EDR)
26th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
32
Ranking in other categories
Security Information and Event Management (SIEM) (14th), User Entity Behavior Analytics (UEBA) (5th), Threat Deception Platforms (5th), Extended Detection and Response (XDR) (17th)
Symantec Endpoint Detection...
Ranking in Endpoint Detection and Response (EDR)
29th
Average Rating
7.6
Reviews Sentiment
5.9
Number of Reviews
31
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Rapid7 InsightIDR is 1.2%, up from 0.7% compared to the previous year. The mindshare of Symantec Endpoint Detection and Response is 0.5%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR)
 

Featured Reviews

Asim Naeem - PeerSpot reviewer
Providing comprehensive insight into alerts while working towards AI enhancement
I definitely recommend Rapid7 InsightIDR. It is becoming better, with improvements being continuously made to the product. Right now, I do not have any advice about Rapid7 for other users because every organization or user has different criteria or multiple use cases, so I refrain from commenting on that. I rate the overall solution seven out of ten.
YusufAhmed - PeerSpot reviewer
Easy to use and competitively priced
Honestly, the product needs to continue the way it is, and I feel that everything will be fine. I haven't had any reasons to complain about the product. The product doesn’t offer MDM functionality under its current licensing model. In the future, I want the product to offer MDM. It can allow me to manage my mobile device more efficiently and effectively. Currently, there is a need for a separate license to be added to Symantec Endpoint Detection and Response to be able to use the MDM part. If both are bundled up under the same license, the administration part can be made easier.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The platform offers unlimited storage and agent-based solutions."
"I definitely recommend Rapid7 InsightIDR."
"Scalability-wise, I rate the solution a ten out of ten. As a cloud tool, the product is highly scalable."
"Features for user behavior analytics and the rules for attack review are good."
"Rapid7 InsightIDR integrates well with other solutions. It's also easy to configure because Rapid7 InsightIDR has a lot of instructions posted on their website that customers can follow if they need to get the source log."
"The alerting to drive investigations and remediation has been its most valuable feature.​"
"The solution is very scalable in terms of the licensing model."
"I have seen that Rapid7 InsightIDR provides security to the networks and endpoints in the company."
"I have had absolutely no problem with using this solution, it really works well."
"The pricing is good."
"It is very simple to use."
"I like Symantec EDR's device control and USB security features."
"The most valuable features of this product include network isolation for machines and the ability to work with a consistent and defined set of virtual machines."
"IPS and the user interface are good features."
"The most valuable features of Symantec Endpoint Detection and Response are its immediate response and investigation."
"There are times when Symantec Endpoint Detection and Response tags an executable as malicious when it is trying to get executed on the machine. In this case, it prevents the execution and it gives you a process view of things where you can look into what has happened and whether it is a genuine process trying to access some system activities, or it's a malicious one. Depending upon the process, it gives you a clear identification, and we can do the containment from the interface itself and isolate the machine from the network. The process review on network isolation is good."
 

Cons

"Currently, it lacks the functionalities provided by Rapid7's User Behavior Analytics (UBA)."
"InsightIDR's integration with other solutions could be improved. Also, I'd like more control from the portal over what's happening on the endpoint side. For example, when I see an attack on an endpoint, I want to be able to stop it from the portal."
"There are certain limitations with Rapid7 that I am working on."
"One thing that springs to mind is easier API integration with ITSMs. We are evaluating a new ITSM and I would like to have InsightIDR create a ticket when an attack is identified, and the ticket would be closed in InsightIDR when the ITSM resolution is completed. This would take out the "single point of failure" we currently have, if the email recipient is somehow absent, in recording the risk appetite for the incident and the actions taken to mitigate or not."
"It would be useful to import threat intelligence in YARA format along with known incorrect email addresses.​"
"I would like to see more development in InsightIDR towards building their SIEM solution and converting it to XDR."
"The interface for doing investigation needs to be enhanced with minor improvements that would make it more useful."
"It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required."
"Technical support is not as good as we expect, and resolving problems should be more timely."
"The interface is very complicated."
"While they are quite dynamic, they need to ensure they are detecting threats faster in the future to keep people safer."
"They do need to minimize the number of agents installed on a server."
"A significant deterioration in customer support."
"The solution can always be more stable and more secure."
"It would be beneficial to have more integration and compatibility with other platforms."
"The solution’s scalability and stability could be improved."
 

Pricing and Cost Advice

"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."
"The pricing of the solution depends on the user. But there is a yearly licensing cost."
"Rapid7 InsightIDR is priced very well and is cost-effective."
"The pricing and licensing are competitive."
"It is more reasonably priced than other vendors."
"​I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability.​"
"Rapid7 InsightIDR charges us based on the endpoints we connect to."
"Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."
"The more devices we have the more expensive it becomes, which is where the challenge is."
"We have a yearly subscription, and the pricing is fair."
"Compared to the tools of competitors, Symantec Endpoint Detection and Response is a cheaply priced product."
"The price is reasonable."
"The product is cheap."
"The price is okay, but it really depends on the customer's requirements."
"Symantec Endpoint Detection and Response is expensive."
"We are satisfied with the pricing."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
865,384 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Manufacturing Company
8%
Financial Services Firm
7%
Government
7%
Computer Software Company
11%
Manufacturing Company
9%
Financial Services Firm
9%
University
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What do you like most about Rapid7 InsightIDR?
During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...
What is your experience regarding pricing and costs for Symantec Endpoint Detection and Response?
I am not aware of the pricing details, as that falls under the management's responsibility.
What needs improvement with Symantec Endpoint Detection and Response?
While the prices for technical issues in Symantec Endpoint Detection and Response are good, as a partner of Symantec, it is very difficult to sell this product because they have a challenging partn...
 

Also Known As

InsightIDR
No data available
 

Overview

 

Sample Customers

Liberty Wines, Pioneer Telephone, Visier
Information Not Available
Find out what your peers are saying about Rapid7 InsightIDR vs. Symantec Endpoint Detection and Response and other solutions. Updated: July 2025.
865,384 professionals have used our research since 2012.