TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    InsightIDR

    Score8.6 out of 10
    N/AIn addition to their incident response service, Rapid7 offers InsightIDR, a combined XDR and SIEM that provides user behavior and threat analytics.

    $5.89

    per month per asset

    Splunk SOAR

    Score9.1 out of 10
    N/ASplunk now offers a security orchestration, automation, and response (SOAR) platform via its acquisition of Phantom. Splunk Security Orchestration and Automation (Splunk SOAR) provides playbook automation and is available as a standalone solution.N/A
    Pricing
    InsightIDRSplunk SOAR
    Editions & Modules
    InsightIDR Advanced
    $5.89
    per month per asset
    No answers on this topic
    Offerings
    Pricing Offerings
    InsightIDRSplunk SOAR
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details*500 asset minimum. Billed annually. All amounts are shown in U.S. dollars. International prices vary.—
    More Pricing Information
    Best Alternatives
    InsightIDRSplunk SOAR
    Small Businesses
    Microsoft Defender XDR
    Score8.7 out of 10
    No answers on this topic
    Medium-sized Companies
    Microsoft Defender XDR
    Score8.7 out of 10
    No answers on this topic
    Enterprises
    Microsoft Defender XDR
    Score8.7 out of 10
    Palo Alto Networks Cortex XSOAR
    Score1.1 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    InsightIDRSplunk SOAR
    Likelihood to Recommend
    10.0
    (12 ratings)
    8.1
    (40 ratings)
    Likelihood to Renew
    -
    (0 ratings)
    7.5
    (3 ratings)
    Usability
    -
    (0 ratings)
    8.2
    (1 ratings)
    Performance
    -
    (0 ratings)
    8.2
    (40 ratings)
    Support Rating
    -
    (0 ratings)
    8.2
    (1 ratings)
    Online Training
    -
    (0 ratings)
    8.2
    (1 ratings)
    Implementation Rating
    -
    (0 ratings)
    8.2
    (1 ratings)
    Configurability
    -
    (0 ratings)
    8.2
    (1 ratings)
    Product Scalability
    -
    (0 ratings)
    8.2
    (1 ratings)
    User Testimonials
    InsightIDRSplunk SOAR
    Likelihood to Recommend
    Rapid7
    It has been brilliant for us in terms of understanding the behaviour affecting our endpoints and assets. We have full visibility of our alerts, which menas we can act on them immediately. We use a single pain of glass with dashboards that can be easily drilled down into to get further information. It has laso helped us eo create bespoke reports for senios Managmeent, while at the same time supports other teams like Network Mnagement and Operations.
    Incentivized
    Read full review
    Cisco
    Our company has very complex and dynamic security operations because of the large number of security tools and systems that we need to manage and coordinate. Moreover, it helps us to meet many regulatory and compliance requirements because it helps us to automate and document our security operations. We also use it to streamline our security operations and improve our response to potential threats.
    Incentivized
    Read full review
    Pros
    Rapid7
    • Rapid7 InsightIDR does a very good job at keeping virus definitions up to date so that our threat intelligence is very up to date when knowing what to protect against.
    • It helps us by scanning all of our infrastructure components and highlights where improvements need to be made in security so we can be proactive with our security initiatives.
    • It has automated response mechanisms to triage and resolve any potentials risks allowing us to save time in the long run.
    Incentivized
    Read full review
    Cisco
    • Its security orchestration and integration capability that supports multiple tools.
    • Easy coding that automates our security actions.
    • Enables us to easily collaborate and respond to security issues faster.
    • Splunk SOAR is a flexible product that is easy to deploy.
    • Efficient tracking and monitoring capability.
    • Excellent real-time reporting functionality.
    Incentivized
    Read full review
    Cons
    Rapid7
    • Sometimes Rapid7 InsightIDR will be too locked down and without knowing will block applications and processes needed for day to day operation.
    • System scans with Rapid7 InsightIDR can be very bandwidth-heavy on the network and system resources.
    • From a recent incident, we have seen more and more false positives from Rapid7 InsightIDR on areas that we know are secure.
    Incentivized
    Read full review
    Cisco
    • A lack of instruction It can be difficult to contact the support staff. Limited experience from current users.
    • It takes some effort to set up and learn new technology at first. More assistance is required from the support staff. The product's price needs to go down.
    • Cost of the larger version.
    Incentivized
    Read full review
    Likelihood to Renew
    Rapid7
    No answers on this topic
    Cisco
    As we already have a lot of clients being catered with Splunk SOAR and because Splunk SOAR is robust and efficient, we are already using it, and we have understood the product to a certain extent, I feel we are personally more enticed to use and scale it to a lot of business.
    Incentivized
    Read full review
    Usability
    Rapid7
    No answers on this topic
    Cisco
    Building playbooks through the visual editor is fine for basic tasks, but once you start chaining complex logic or integrating 3rd party APIs you hit a wall that requires deep scripting knowledge.
    Incentivized
    Read full review
    Performance
    Rapid7
    No answers on this topic
    Cisco
    We are able to automate almost every one of our use cases, even our threat-hunting, and threat intel procedures. We have 20+ playbooks and cover almost everything, even searching logs into Splunk, looking into TIP and external systems, enrichment, and collecting evidence for analysts; it can perform concurrent playbooks running.
    Incentivized
    Read full review
    Support Rating
    Rapid7
    No answers on this topic
    Cisco
    Splunk Support is always great! In addition the Community is very efficient and active.
    Incentivized
    Read full review
    In-Person Training
    Rapid7
    No answers on this topic
    Cisco
    I never followed an in-person training, I gave my evaluation based on the online training
    Incentivized
    Read full review
    Online Training
    Rapid7
    No answers on this topic
    Cisco
    I followed training for Phantom admins and it opened a world for me
    Incentivized
    Read full review
    Implementation Rating
    Rapid7
    No answers on this topic
    Cisco
    I already said that the main key insight is the knowledge of Phantom, so a detailed training for all the people involeved.
    Incentivized
    Read full review
    Alternatives Considered
    Rapid7
    The biggest advantage it has the lightweight agent and smooth and less traffic chaos in network during log collection. Cloud Security always require extra efforts but InsightIDR reduce that burden as it has highly anticipated agents to which knows what they need to do when they captured malicious traffic.log collection and threat intelligence is major part in and xdr and here it stand out along others in the market, I started my career as qualys administration but I like InsightIDR much now.
    Incentivized
    Read full review
    Cisco
    Splunk Phantom integrates well with Splunk ES and has many integrations. One thing that I liked about XSOAR as compared to Phantom is that it has an "app-store" where you can download not only app integrations (similar to Phantom) but Playbooks and dashboards as well.
    Incentivized
    Read full review
    Scalability
    Rapid7
    No answers on this topic
    Cisco
    me and the customers I encountered found it flexible and scalable
    Incentivized
    Read full review
    Return on Investment
    Rapid7
    • Rapid7 InsightIDR has allowed us to be proactive in securing our systems as the vulnerability scans give us a lens at what we need to fortify when it comes to security.
    • In recent incidents its allowed us to save time and money as it mostly detects issues accurately and we are able to bring systems back quickly without too much downtime for the business.
    • With recent updates, we are confident that Rapid7 InsightIDR is a good solution for the long run as they are always making adjustments to their platform and improving it with every release.
    Incentivized
    Read full review
    Cisco
    • The playbooks are valuable. They are the core component. Being able to implement and build a code process to work through and scale out what we want to do is valuable
    • Before its use, analyzing each email would take at least 15 to 20 minutes, with some complex cases taking up to 30 minutes...With the automation provided by Splunk Phantom, we could significantly reduce the amount of time and human effort required to complete this task
    Incentivized
    Read full review
    ScreenShots