Rapid7 InsightIDR Primary Use Case
I am using Rapid7 InsightIDR as an InsightIDR solution. This tool is integrated with other solutions like endpoint and NDR, and it correlates alerts, giving me a comprehensive picture of the alerts.
View full review »We use the tool for secret events, compliance, and information management.
View full review »Rapid7 InsightIDR helps me detect any malicious activities in any endpoints in my company.
View full review »Buyer's Guide
Rapid7 InsightIDR
June 2025

Learn what your peers think about Rapid7 InsightIDR. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
861,803 professionals have used our research since 2012.
I use Rapid7 InsightIDR to collect logs and information from throughout our company's entire IT environment.
View full review »Our company is a system integrator for Rapid7 InsightIDR. We use the latest SaaS version of the product. Rapid7 InsightIDR works as the foundation of the security operation center in our company. The solution is used in our organization for data ingesting for multiple security devices and solutions. Rapid7 InsightIDR provides insights and stability on the security aspects of the company.
View full review »We use the tool for deployment, incorporating both EDR and SIP management. It serves the purpose of event management, including log retrieval from endpoints, malware detection, and providing about system health. This includes assessing vulnerabilities and determining the level of risk the system is exposed to at specific points in time. Its dashboard is wonderful.
We use Rapid InsightIDR for security operations, threat response, and DFIR. It also provides lab practices to individuals.
View full review »I used the solution to monitor networks and prevent them from real-time threats.
View full review »I used it in my previous company. We were the integrator of the solution, and also a partner of Rapid7 at the time.
We used it for security monitoring and also for analytics. We used it for our own company, and like an MSSP, we sold this to our customers. So, we did security monitoring for our customers and interim response for them.
It was cloud-based, and I was using its latest version.
View full review »We are using Rapid7 to provide threat detection and response services to our clients. It covers 1,200 users and 1,100 assets.
View full review »Normally, we use the solution as an event viewer to collect and resume cases and playbooks.
View full review »CP
Chiko Phiri
System Engineer at Starlabs Limited
We provide InsightIDR for our banking and ICT clients.
View full review »JC
JoChaiyut
Product Manager at Bizinfo
I use the solution for its SIEM functionalities, log analysis, and behavioral analysis.
View full review »The main use case for InsightIDR is to investigate threat activity that can compromise the internal customer environment. We can track a threat from the first attempt or breach. Then we can investigate the threat from start to finish.
MK
Midhun Kumar
Head of Infrastructure at Pearl Data Direct
We're using Rapid7 as our SIEM. I'm the head of infrastructure and we are customers of Rapid7.
View full review »DB
Davide Baudanza
CoFounder & Head of Technology at intuity
We use this solution to develop our business and we also provide it to some of our customers. The primary use case is for security information and event management, monitoring and acting on any event.
View full review »We use this solution for monitoring intrusion detection and prevention.
View full review »We primarily use the solution for a combination of log management as well as threat detection.
View full review »I use it to track events on our infrastructure to help with secure access and detection. We have many firewalls and antivirus DHCP (The Dynamic Host Configuration Protocol) DNS (Domain Name System), logs of Office 365, et cetera. We use this software to monitor and track our traffic and usage by creating logs.
Centralized SIEM / Intrusion Detection System.
View full review »The following are our main use cases for InsightIDR:
- Log correlation and searching, as well as alerting;
- IDR Vulnerability management;
- IVM;
- Incident response;
- Breach detection.
- Security incident
- Event management
JS
Josh Serna
Information Security Systems Administrator at a non-tech company with 5,001-10,000 employees
Visibility and response.
View full review »I was looking for a behavior analytics solution to help me monitor our users' activity and to notify of any suspicious activity.
InsightIDR was able to meet those needs and even exceed it by providing full SIEM capabilities, even for devices they don’t support directly. Most importantly, I don’t need a team of people dedicated to log collecting and sifting.
View full review »It is used to maintain our security posture by monitoring inside our network for behavior likely to be conducive with elements of the kill chain.
I was an early adopter of the product. I have seen it get better over time, making use of the data and methodologies used by the industry standard and Rapid7 Metasploit community.
View full review »We are distributors and sell this product to our customers. I'm a security consultant.
View full review »The solution is used as a platform for a better understanding of the Intelligence products that different vendors sell.
View full review »Buyer's Guide
Rapid7 InsightIDR
June 2025

Learn what your peers think about Rapid7 InsightIDR. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
861,803 professionals have used our research since 2012.