Try our new research platform with insights from 80,000+ expert users

Rapid7 InsightIDR vs Trellix Endpoint Security (ENS) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Rapid7 InsightIDR
Ranking in Endpoint Detection and Response (EDR)
24th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
32
Ranking in other categories
Security Information and Event Management (SIEM) (13th), User Entity Behavior Analytics (UEBA) (3rd), Threat Deception Platforms (5th), Extended Detection and Response (XDR) (15th)
Trellix Endpoint Security (...
Ranking in Endpoint Detection and Response (EDR)
20th
Average Rating
7.6
Reviews Sentiment
7.4
Number of Reviews
54
Ranking in other categories
Endpoint Protection Platform (EPP) (26th)
 

Mindshare comparison

As of May 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Rapid7 InsightIDR is 1.1%, up from 0.7% compared to the previous year. The mindshare of Trellix Endpoint Security (ENS) is 2.1%, up from 1.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR)
 

Featured Reviews

Asim Naeem - PeerSpot reviewer
Providing comprehensive insight into alerts while working towards AI enhancement
I definitely recommend Rapid7 InsightIDR. It is becoming better, with improvements being continuously made to the product. Right now, I do not have any advice about Rapid7 for other users because every organization or user has different criteria or multiple use cases, so I refrain from commenting on that. I rate the overall solution seven out of ten.
Shreyansh Sharma - PeerSpot reviewer
Our main antivirus tool and offers adaptive threat prevention tool
The technical support needs some improvement. When product distribution errors occur, we have to contact technical support, which is a very tedious and time consuming task. After raising the call onto the technical support portal, usually receive a notification after 24 hours. It usually takes 3 to 4 days to conclude and resolve the issue. If 24/7 online support or a phone line where we could speak directly with technical support for real-time troubleshooting, that would be very helpful. Licensing is another aspect where trellix should look into. Different purchases are grouped together in single user account get mixed up. Categorization of purchases and their grant numbers is not available to end user.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The alerting to drive investigations and remediation has been its most valuable feature.​"
"I like the tool's user analysis feature."
"Rapid7's reporting is more robust than Tenable's."
"Very intuitive and easy to set up."
"The solution provides satisfying native integration features"
"The solution is very scalable in terms of the licensing model."
"The product works well. Stability-wise, I rate the solution a ten out of ten."
"Log search allows us to dive deep into aggregated logs and query all event types at once.​"
"The independent modules are very good."
"The product can be installed in almost any environment"
"The features we have found most valuable have been containment as well as the ability to triage agent activities."
"It is scalable and stable and the initial setup is the easiest part of using the product."
"MVISION offers decent protection."
"The most valuable feature is user-based policy provision."
"It has a feature called Isolation. If a device is compromised, we can connect it to our SOC, and no one would be able to access it. This way we can limit the damage to the network while we are investigating."
"The technical support services are good."
 

Cons

"They should add more configuration and security features to it."
"The searching feature in Rapid7 InsightIDR needs to evolve"
"Customised alert recipients need to be added to allow better first-line action and quicker response. Configurable honeypots would be a welcome addition."
"The dashboard is an area that could be simplified."
"There are certain limitations with Rapid7 that I am working on."
"The reporting is the weakest aspect. There needs to be multi-level grouping for events (for example, group by user and destination). Right now, we can do a group by user and a separate table or group by destination. But I'd be more interested in where a person was logging into instead of who was logging in or where he was logging in."
"Cloud risk assessment is one area where I think they need a lot of improvement."
"Rapid7 InsightIDR is not intuitive to search for logs. It should be more user-friendly and improve the dashboards. We should be able to use ready-made templates instead of having to build one."
"They have something called Managed Detection and Response. They get intel from their customers, and that intel is shared with the rest of FireEye's customers. I want to subscribe to their intel, but that is not available to us."
"The price of McAfee MVISION Endpoint could improve."
"The Linux support is very poor. I use base detection. Currently, they are providing malware protection and logon track features in Windows and Mac. These features aren't available in Linux. It will be helpful to extend these capabilities to Linux. We would also like assets grouping and device lock protection features, which are included in their roadmap."
"Endpoint resource utilization causes high levels of instability and that is something that needs improvement."
"The product’s on-premise version is costly in terms of extra charges for SQL database and Windows server licenses."
"I would like to see more local integration for the applications that we use."
"It is a very heavy tool, unfortunately."
"The performance could be better. I noticed that it slows down a bit."
 

Pricing and Cost Advice

"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."
"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."
"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."
"The pricing of the solution depends on the user. But there is a yearly licensing cost."
"It is more reasonably priced than other vendors."
"The pricing is good, and it is not very expensive."
"The solution has a mid-range price point in the market"
"Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."
"They should reduce the cost or make it free, open-source software."
"The product pricing is high."
"Licensing fees are billed on a yearly basis."
"The pricing is mid-ranged and quite reasonable compared to other similar products."
"Trellix Endpoint Security (ENS) has a reasonable price."
"It is based on an annual subscription."
"We are on an annual subscription for McAfee MVISION Endpoint. The cost for the license could be less expensive."
"It is a yearly subscription-based product, which includes the license and hardware. There is also a subscription for technical support up to five years."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
850,349 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
9%
Manufacturing Company
7%
Government
7%
Computer Software Company
15%
Financial Services Firm
13%
Government
12%
Manufacturing Company
11%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What do you like most about Rapid7 InsightIDR?
During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...
How does McAfee Endpoint Security compare with MVISION?
The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deploy various components as desired with McAfee Endpoint Security, whereas many othe...
How does Crowdstrike Falcon compare with FireEye Endpoint Security?
The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effective program. Its graphical design is such that it makes an extremely useful too...
What do you like most about McAfee MVISION Endpoint?
The product's initial setup phase was straightforward.
 

Also Known As

InsightIDR
McAfee MVISION Endpoint, Trellix Endpoint Security (HX)
 

Overview

 

Sample Customers

Liberty Wines, Pioneer Telephone, Visier
Tech Resources Limited, Globe Telecom, Rizal Commercial Banking Corporation
Find out what your peers are saying about Rapid7 InsightIDR vs. Trellix Endpoint Security (ENS) and other solutions. Updated: April 2025.
850,349 professionals have used our research since 2012.