DFLabs IncMan vs. Rapid7 InsightConnect

It is well suited for those that have DFLabs IncMan soar on cloud. It is less suited for on prem beside that it is possible to integrate very well but with more work to do it so.

Incentivized

Where Rapid7 InsightConnect excels is in environments needing the whole suite of virus protection and monitoring. In our environment we use it to make sure we have visibility over all endpoints, servers, hosts, and clusters to make sure that there are no vulnerabilities being left unattended too. It is also best in large environments. Since there are many endpoints, the automation from Rapid7 helps manage them all in an efficient manner.

Incentivized

• Case Managment
• SOAR
• Building new/custom integrations
• workflow building system

Incentivized

• The most significant difference is that we no longer have to examine endpoints and devices separately.
• The cost.
• The impact on the safety and efficiency of our business.

Incentivized

• Allow custom html on the return values from the workflow to the case, like let us put the outputs prettier
• Allow building custom integration just using openapi

Incentivized

• It would be great if Rapid7 InsightConnect could be configured based on pre determined specifications when installing the agent.
• We've noticed that at times, there are certain network parameters needed in order for Rapid7 to collect and report data efficiently.
• Sometimes there are issues with the discovery scan in Rapid7 making it hard to configure in the beginning.

Incentivized

It's incredibly easy to set up, to use, to detect threats. It's easy to change, tweek and very quick to resolve all issues

Incentivized

Palo Alto was slightly cheaper, but more complex and would need the training to be effective. Splunk was comparative from a price standpoint, but the automation features of Rapid7 InsightConnect outweighed those of Splunk SOAR. Honestly, all of these are great choices, but for our environment, it made more sense to go with Rapid7.

Incentivized

• Don't know not part of that process

Incentivized

• The automation and integration we set up in the dev cycle helped us provide evidence in audits
• The automation and integration we set up in the dev cycle helped us fix vulns in our software prior to implementation thus increasing our security
• Automations save massive time and headache's between infosec and devs

Incentivized