Rapid7 InsightIDR vs. TheHive

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
InsightIDR
Score 8.6 out of 10
N/A
In addition to their incident response service, Rapid7 offers InsightIDR, a combined XDR and SIEM that provides user behavior and threat analytics.
$5.89
per month per asset
TheHive
Score 9.7 out of 10
Enterprise companies (1,001+ employees)
TheHive is an open source and free cybersecurity incident response platform.
$17,000
per year per installation
Pricing
Rapid7 InsightIDRTheHive
Editions & Modules
InsightIDR Advanced
$5.89
per month per asset
TheHive Gold Edition
Starting from $17.000
per year per installation
TheHive Platinum Edition
Starting from $23.000
per year per installation
TheHive Cloud Platform - Large
Starting from $41.000
per year per installation
TheHive Cloud Platform -X Large
Starting from $48.000
per year per installation
TheHive Cloud Platform - Custom
Starting from $48.000
per year per installation
Offerings
Pricing Offerings
InsightIDRTheHive
Free Trial
YesYes
Free/Freemium Version
NoYes
Premium Consulting/Integration Services
NoYes
Entry-level Setup FeeNo setup fee$5,000 one-time fee per installation
Additional Details*500 asset minimum. Billed annually. All amounts are shown in U.S. dollars. International prices vary.TheHive Gold and Platinum editions are priced per number of users (seats) and orgnizations (tenants). Our prices start from 1 organization and 5 users.
More Pricing Information
Features
Rapid7 InsightIDRTheHive
Incident Response Platforms
Comparison of Incident Response Platforms features of Product A and Product B
Rapid7 InsightIDR
-
Ratings
TheHive
10.0
1 Ratings
16% above category average
Company-wide Incident Reporting00 Ratings10.01 Ratings
Integration with Other Security Systems00 Ratings10.01 Ratings
Centralized Dashboard00 Ratings10.01 Ratings
Live Response for Rapid Remediation00 Ratings10.01 Ratings
Best Alternatives
Rapid7 InsightIDRTheHive
Small Businesses
SentinelOne Singularity
SentinelOne Singularity
Score 9.1 out of 10
ThreatDown, powered by Malwarebytes
ThreatDown, powered by Malwarebytes
Score 8.7 out of 10
Medium-sized Companies
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
Enterprises
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
Hoxhunt
Hoxhunt
Score 9.3 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Rapid7 InsightIDRTheHive
Likelihood to Recommend
8.4
(13 ratings)
10.0
(1 ratings)
User Testimonials
Rapid7 InsightIDRTheHive
Likelihood to Recommend
Rapid7
It has been brilliant for us in terms of understanding the behaviour affecting our endpoints and assets. We have full visibility of our alerts, which menas we can act on them immediately. We use a single pain of glass with dashboards that can be easily drilled down into to get further information. It has laso helped us eo create bespoke reports for senios Managmeent, while at the same time supports other teams like Network Mnagement and Operations.
Read full review
StrangeBee
Managing incident response - it does exactly what it is supposed to do!
Read full review
Pros
Rapid7
  • Rapid7 InsightIDR does a very good job at keeping virus definitions up to date so that our threat intelligence is very up to date when knowing what to protect against.
  • It helps us by scanning all of our infrastructure components and highlights where improvements need to be made in security so we can be proactive with our security initiatives.
  • It has automated response mechanisms to triage and resolve any potentials risks allowing us to save time in the long run.
Read full review
StrangeBee
No answers on this topic
Cons
Rapid7
  • Sometimes Rapid7 InsightIDR will be too locked down and without knowing will block applications and processes needed for day to day operation.
  • System scans with Rapid7 InsightIDR can be very bandwidth-heavy on the network and system resources.
  • From a recent incident, we have seen more and more false positives from Rapid7 InsightIDR on areas that we know are secure.
Read full review
StrangeBee
No answers on this topic
Alternatives Considered
Rapid7
The biggest advantage it has the lightweight agent and smooth and less traffic chaos in network during log collection. Cloud Security always require extra efforts but InsightIDR reduce that burden as it has highly anticipated agents to which knows what they need to do when they captured malicious traffic.log collection and threat intelligence is major part in and xdr and here it stand out along others in the market, I started my career as qualys administration but I like InsightIDR much now.
Read full review
StrangeBee
No answers on this topic
Return on Investment
Rapid7
  • Rapid7 InsightIDR has allowed us to be proactive in securing our systems as the vulnerability scans give us a lens at what we need to fortify when it comes to security.
  • In recent incidents its allowed us to save time and money as it mostly detects issues accurately and we are able to bring systems back quickly without too much downtime for the business.
  • With recent updates, we are confident that Rapid7 InsightIDR is a good solution for the long run as they are always making adjustments to their platform and improving it with every release.
Read full review
StrangeBee
No answers on this topic
ScreenShots

TheHive Screenshots

Screenshot of Alert Management: Go through your dedicated and detailed Alert page, make comments, identify similar Alerts, define custom statuses and fields. Then decide whether or not they should be escalated to investigations or to incident response.Screenshot of Case Management: Create cases and associated tasks and observables. Identify similar cases and alerts, define the PAP (Permissible Actions Protocol) level on each Observable, or improve your Incident Response process using a simple yet powerful template engine.Screenshot of Muti Tenant Environments: Define the different organizations and teams and get them to work in a dedicated or collaborative mode: tenants' cases can be isolated or investigated by users from different organizations based on customizable roles and permissions.Screenshot of User Management: Define and customize user profiles, assign them to users within their organizations and synchronise them via LDAP or AD.Screenshot of Metrics and Dashboards: Compile and correlate statistics on cases, tasks, observables, metrics and more to generate useful KPIs and MBOs with our dynamic dashboard engine.Screenshot of MISP Integration: Get shared Indicators of compromise quickly imported and ready to use or share yours easily with your communities by connecting TheHive with MISP.