TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Snort

    Score9 out of 10
    N/ASourcefire developed Snort, an open source intrusion prevention system capable of real-time traffic analysis and packet logging. Snort was acquired (and is now supported) by Cisco in 2013.N/A

    InsightIDR

    Score8.6 out of 10
    N/AIn addition to their incident response service, Rapid7 offers InsightIDR, a combined XDR and SIEM that provides user behavior and threat analytics.

    $5.89

    per month per asset

    Pricing
    SnortInsightIDR
    Editions & Modules
    No answers on this topic
    InsightIDR Advanced
    $5.89
    per month per asset
    Offerings
    Pricing Offerings
    SnortInsightIDR
    Free Trial
    NoYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details—*500 asset minimum. Billed annually. All amounts are shown in U.S. dollars. International prices vary.
    More Pricing Information
    Community Pulse
    SnortInsightIDR
    Considered Both Products
    Cisco
    No answer on this topic
    Rapid7
    No answer on this topic
    Key User Insights
    Would buy again
    No answers on this topic
    100%
    Would buy again
    12 Answers
    Delivers good value for the price
    No answers on this topic
    91%
    Delivers good value for the price
    10 Answers
    Happy with the feature set
    No answers on this topic
    100%
    Happy with the feature set
    12 Answers
    Lived up to sales and marketing promises
    No answers on this topic
    100%
    Lived up to sales and marketing promises
    12 Answers
    Implementation went as expected
    No answers on this topic
    100%
    Implementation went as expected
    12 Answers
    Best Alternatives
    SnortInsightIDR
    Small Businesses
    No answers on this topic
    Microsoft Defender XDR
    Score8.7 out of 10
    Medium-sized Companies
    Palo Alto Networks Advanced Threat Prevention
    Score8.5 out of 10
    Microsoft Defender XDR
    Score8.7 out of 10
    Enterprises
    Proofpoint Advanced Threat Protection
    Score8.4 out of 10
    Microsoft Defender XDR
    Score8.7 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    SnortInsightIDR
    Likelihood to Recommend
    8.1
    (5 ratings)
    10.0
    (12 ratings)
    User Testimonials
    SnortInsightIDR
    Likelihood to Recommend
    Cisco
    If a colleague was looking to tighten down their network I can easily recommend Snort to them. It gives you some more peace of mind knowing that its always scanning traffic for malicious looking code. Even things your major firewalls and security hardware might miss, Snort has picked up. Its an easy recommendation for me.
    Incentivized
    Read full review
    Rapid7
    It has been brilliant for us in terms of understanding the behaviour affecting our endpoints and assets. We have full visibility of our alerts, which menas we can act on them immediately. We use a single pain of glass with dashboards that can be easily drilled down into to get further information. It has laso helped us eo create bespoke reports for senios Managmeent, while at the same time supports other teams like Network Mnagement and Operations.
    Incentivized
    Read full review
    Pros
    Cisco
    • IPS detection.
    • DoS detection.
    • Packet logging.
    Incentivized
    Read full review
    Rapid7
    • Rapid7 InsightIDR does a very good job at keeping virus definitions up to date so that our threat intelligence is very up to date when knowing what to protect against.
    • It helps us by scanning all of our infrastructure components and highlights where improvements need to be made in security so we can be proactive with our security initiatives.
    • It has automated response mechanisms to triage and resolve any potentials risks allowing us to save time in the long run.
    Incentivized
    Read full review
    Cons
    Cisco
    • At times can be unstable with Cisco bugs, require frequent upgrading.
    • FTD images that are being pushed for ASAs are less efficient from an administration standpoint, no CLI.
    Incentivized
    Read full review
    Rapid7
    • Sometimes Rapid7 InsightIDR will be too locked down and without knowing will block applications and processes needed for day to day operation.
    • System scans with Rapid7 InsightIDR can be very bandwidth-heavy on the network and system resources.
    • From a recent incident, we have seen more and more false positives from Rapid7 InsightIDR on areas that we know are secure.
    Incentivized
    Read full review
    Alternatives Considered
    Cisco
    For our organization, the Cisco defense in depth concept works the best. While Cisco can be made to work with other vendors, we have found the best in depth protection by integrating Cisco products for maximum visibility. We had a Barracuda Web Filter, but it was difficult to maintain when you had limited scope on what you could block, so we created a whitelist only setup which required a lot of additional manpower. This wouldn't have covered new threats with DNS spoofing and the like. Sourcefire also integrated with our anti-malware platform (Cisco AMP) for even better visibility on what may be happening on the end users workstation. We are planning on adding in Cisco ISE to complete the approach and possibly stealthwatch to cover our bases in the future. The Palo Alto gear was interesting, but it was priced far out of our range.
    Incentivized
    Read full review
    Rapid7
    The biggest advantage it has the lightweight agent and smooth and less traffic chaos in network during log collection. Cloud Security always require extra efforts but InsightIDR reduce that burden as it has highly anticipated agents to which knows what they need to do when they captured malicious traffic.log collection and threat intelligence is major part in and xdr and here it stand out along others in the market, I started my career as qualys administration but I like InsightIDR much now.
    Incentivized
    Read full review
    Return on Investment
    Cisco
    • Being open source, ROI on free is hard to beat for something that works.
    • I believe it greatly enhances the security of my network.
    Read full review
    Rapid7
    • Rapid7 InsightIDR has allowed us to be proactive in securing our systems as the vulnerability scans give us a lens at what we need to fortify when it comes to security.
    • In recent incidents its allowed us to save time and money as it mostly detects issues accurately and we are able to bring systems back quickly without too much downtime for the business.
    • With recent updates, we are confident that Rapid7 InsightIDR is a good solution for the long run as they are always making adjustments to their platform and improving it with every release.
    Incentivized
    Read full review
    ScreenShots