I use Rapid7 InsightIDR to collect logs and information from throughout our company's entire IT environment.
External reviews
82 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Excellent soc tools to have analysis
What do you like best about the product?
Its have features of integrated with active directory to check user details in detailed
It's very easy to approach
It's very easy to approach
What do you dislike about the product?
No option to export daily alerts
It's should be very recommended for organisation to help for their approach of business possibilities
It's should be very recommended for organisation to help for their approach of business possibilities
What problems is the product solving and how is that benefiting you?
It's user for deep analysis of any incident with approach of log analysis and detailed investigation
It's depends on the approach of user
It's depends on the approach of user
InsightIDR is a highly effective and user-friendly cybersecurity solution.
What do you like best about the product?
The visibility and threat detection that InsightIDR offers for our organization's network is vital, making it a crucial component of our defence against cyberattacks. It is also very easy to use.
What do you dislike about the product?
Pricing: Although InsightIDR offers outstanding value for the services it delivers, smaller organisations with tighter budgets could discover its pricing to be on the expensive side.
What problems is the product solving and how is that benefiting you?
Cybersecurity-related issues are being addressed by InsightIDR, and the advantages it provides to organisations using it are significant. Here are some of the main issues that InsightIDR resolves and how those advantages might help your company:
Detecting threats in real time is where InsightIDR really shines. It recognises and notifies you of questionable actions, unauthorised access tries, and potential security breaches as they take place. With this skill, you can react quickly, reducing the potential harm and data loss brought on by cyberattacks.
Detecting threats in real time is where InsightIDR really shines. It recognises and notifies you of questionable actions, unauthorised access tries, and potential security breaches as they take place. With this skill, you can react quickly, reducing the potential harm and data loss brought on by cyberattacks.
A solution that offers easy setup and deployment phases, along with great scalability and stability
What is our primary use case?
What is most valuable?
The most valuable feature of the solution is the single pane of glass that allows me to see all the information in one spot. I can see at one spot to see all the information from all the logs and everything.
What needs improvement?
Sometimes, it is hard to get the right queries to use. Currently, the tool lacks a pre-made set of queries. In the future, I would like the tool to offer its uses with a pre-made set of queries.
For how long have I used the solution?
I have been using Rapid7 InsightIDR for a year. I use the solution's latest version. My company is a customer of the solution.
What do I think about the stability of the solution?
The product works well. Stability-wise, I rate the solution a ten out of ten.
What do I think about the scalability of the solution?
I rate the product's scalability a ten out of ten since, scalability-wise, it is a really good tool.
Rapid7 InsightIDR is managed by four people in my company.
How are customer service and support?
The speed of response from the technical support team may vary since I purchased it from a reseller in Sweden and not from Rapid7 directly.
I rate the technical support a seven out of ten.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
In the past, my company used Unomaly, a tool from Sweden. My company switched from Unomaly to Rapid7 InsightIDR after seeing that the former could only checked syslogs, while we wanted something that checked our overall systems.
How was the initial setup?
I rate the initial setup a ten out of ten.
The solution's initial setup was very straightforward.
The solution is deployed on an on-premises and cloud model. The cloud services are provided by Rapid7.
The solution can be deployed in half a day or four hours in a small environment.
I was the only person involved in the product's deployment phase.
What's my experience with pricing, setup cost, and licensing?
After considering the prices of the product's competitors, I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive. There may be some additional costs attached to the solution only if you want to buy a SOC or something. I don't have to pay for any additional costs at the moment.
What other advice do I have?
I suggest that those who plan to use the solution give it a try since it is free for a couple of months. The solution has really easy setup and deployment phases, and you can even remove it from your environment if you want to do so later.
I rate the overall product a nine out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Lets you simplify threat detection and has a fast deployment
What is our primary use case?
The solution is used as a platform for a better understanding of the Intelligence products that different vendors sell.
What is most valuable?
Rapid7 is easy to use and deploy. It is a simple solution and has easy data pulling.
What needs improvement?
The APIs can be further improved in Rapid7.
For how long have I used the solution?
I have been using Rapid7 InsightIDR for two months.
What do I think about the stability of the solution?
It is stable solution.
What do I think about the scalability of the solution?
It is a scalable solution. Presently, there are only small businesses working with the solution.
How are customer service and support?
The technical support team is good.
How was the initial setup?
The initial setup is easy. The deployment took only half an hour. It's just a cloud platform. You just have to deploy a connector like Select Pro, and it will set the data from the on-premise. It will send it to the cloud platform, and you can have it installed in five to ten minutes.
What's my experience with pricing, setup cost, and licensing?
The pricing of the solution depends on the user. But there is a yearly licensing cost.
What other advice do I have?
It is a good solution but just has some API issues. I rate the solution an eight out of ten.
A highly-rated entry-level SIEM solution that is ideal for SMBs
What is most valuable?
I like that it's a cloud-based solution. The features of all SIEM solutions are pretty much the same, but Rapid7 is user-friendly, totally cloud-based, and can integrate into the EDR solution whenever a customer wants it. Those are USPs for us.
What needs improvement?
Because Rapid7 was originally a vulnerability management solution, more and more companies are now moving towards their technologies and their existing SIEM applications and converting them to XDR solutions. Though Rapid7 provides its EDR option with SIEM, it has a long way to go to achieve an XDR status.
I would like to see more development in InsightIDR towards building their SIEM solution and converting it to XDR because every SIEM solution provider is moving their solutions toward XDR.
For how long have I used the solution?
I've been working with Rapid7 InsightIDR for two years.
What do I think about the stability of the solution?
The product is stable.
Which solution did I use previously and why did I switch?
We used to use QRadar in my previous company. The first difference is in the deployment architecture. QRadar comes with cloud and on-prem options. In countries like Pakistan, where I am from, there are very strict regulations for using cloud solutions, especially in the banking sector. Rapid7 only offers a SaaS-based SIEM.
The second difference between the two is in their licensing. Rapid7 InsightIDR license is applied based on the number of nodes and devices. QRadar, on the other hand, does licenses the events per second.
The third difference is in the threat intelligence QRadar provides, and there's a huge difference between the two in this domain. QRadar is an IBM product that is very old in the SIEM market and provides relatively better threat intelligence than players like Rapid7.
How was the initial setup?
The solution is easy to implement.
What's my experience with pricing, setup cost, and licensing?
Rapid7 InsightIDR is priced very well and is cost-effective.
Which other solutions did I evaluate?
Enterprise-level customers have better options, such as LogRhythm, QRadar, and Splunk. These products are core SIEM-based companies that are old players in this market. Rapid7 is a relatively new entrant in the SIEM market. However, it has strong capabilities, and customers trust big names, big companies they've known from the beginning, who have been working on SIEM solutions since inception.
What other advice do I have?
The benefit of the solution, first of all, is that it's cost-effective. It is also a Gartner leading solution, which provides more credibility in the customer's eyes. Eventually, it benefits us to translate that credibility into achieving more and more revenue through it.
I recommend Rapid7 InsightIDR for SMB companies because there are better options in the market for enterprises.
I rate the solution an eight out of ten.
Awesome Power!
What do you like best about the product?
Prompt, easy to parse alerts on the relevant assets it monitors that allows for a measured and swift response.
What do you dislike about the product?
That every contract I'm on doesn't use it. I am a big fan of the Rapid7 product as a Cybersecurity professional. I think this is the best on the market in the detection and response space.
What problems is the product solving and how is that benefiting you?
Every deployment I've been fortunate enough to to work on the administrator side of the operation is saving TIME and headache. So in terms of labor and my team's sanity = paying dividends.
A cloud-based solution that is licensed based on the number of assets instead of the number of EPS
What is most valuable?
Rapid7 InsightIDR is a cloud-based solution. Customers don't have to provision storage either internally or externally, and everything is already factored into the cost of the solution. So that takes out the headache.
The solution is very scalable in terms of the licensing model. It's not licensed based on the number of EPS as in a traditional SIEM solution. It's licensed based on the number of assets, and I believe the customers have more control over their assets than their EPS.
What needs improvement?
The solution's XDR agents cannot compete with the XDR solutions out there yet. It has to be a stand-alone XDR solution, and I know they are working on that. They have to ensure that it has the full capabilities of an XDR solution.
For how long have I used the solution?
I have been working with Rapid7 InsightIDR for about two years.
What do I think about the stability of the solution?
Rapid7 InsightIDR is a stable solution.
How are customer service and support?
Rapid7 InsightIDR's technical support is great and very responsive. Of course, their support depends on the SLAs.
How would you rate customer service and support?
Positive
What about the implementation team?
Rapid7 InsightIDR can be up or running in a matter of hours or minutes. It takes about a week or two to deploy the solution for an enterprise account with full integration of an IT use case.
What's my experience with pricing, setup cost, and licensing?
Rapid7 InsightIDR's pricing is reasonable.
What other advice do I have?
Overall, I rate Rapid7 InsightIDR a nine out of ten.
Helps in the management of compliance, secret events and information
What is our primary use case?
We use the tool for secret events, compliance, and information management.
What is most valuable?
I like the tool's user analysis feature.
What needs improvement?
Rapid7 InsightIDR is not intuitive to search for logs. It should be more user-friendly and improve the dashboards. We should be able to use ready-made templates instead of having to build one.
For how long have I used the solution?
We had done our first deployment three years ago.
What do I think about the stability of the solution?
Rapid7 InsightIDR is stable.
What do I think about the scalability of the solution?
The tool is cloud-based and scalable.
How are customer service and support?
Rapid7 InsightIDR's technical support is reactive and supportive. However, they only speak English. Our native language is French and it would be better if they can have some French speaking agents.
Which solution did I use previously and why did I switch?
The solution provides better value than competitors with its modules. The deployment is simple and straightforward. However, Rapid7 InsightIDR is not good for log management.
How was the initial setup?
One of our customers had a Huawei firewall and we required help to do the configuration. However, the installation was easy with other standard vendors like Cisco and Check Point. The product's deployment got completed in four to five days and we required three people to handle it. One person was in charge of the portal's initial set up and the other one handled the integration of on-premises devices. The third one took care of Office 365 integration.
What's my experience with pricing, setup cost, and licensing?
Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs.
What other advice do I have?
I would rate Rapid7 InsightIDR an eight out of ten.
Rapid 7 IDR
What do you like best about the product?
We are now monitoring all logs from various security solutions sent to IDR and it helps our operations in correlating all these findings easily. Saves time in logging in to different UI and we now have a single console of correlation and source of alerts and notifications
What do you dislike about the product?
NOt all solutions can be integrated outside the box. We need to learn all parsings and eliminate all false positives. It takes time for the solution to learn network traffic
What problems is the product solving and how is that benefiting you?
We bought primarily for SIEM purpose and it is benefiting the company in terms of saving time for analyst to go over all solutions for every shift. It has a descent XDR features although we haven't maximized it yet.
It provides excellent visibility a fast response
What is our primary use case?
We provide InsightIDR for our banking and ICT clients.
What is most valuable?
InsightIDR helps us investigate an environment to discover information about incidents.
What needs improvement?
InsightIDR's integration with other solutions could be improved. Also, I'd like more control from the portal over what's happening on the endpoint side. For example, when I see an attack on an endpoint, I want to be able to stop it from the portal.
For how long have I used the solution?
I have used InsightIDR for four years.
What do I think about the stability of the solution?
I rate InsightIDR 10 out of 10 for stability.
What do I think about the scalability of the solution?
I rate InsightIDR six out of 10 for scalability. The licensing model limits the scalability. The licenses are defined based on assets, so you have to purchase more licenses as you add assets. It's suitable for a small or medium-sized company. We have about 250 users.
How are customer service and support?
I rate Rapid7 support nine out of 10.
How would you rate customer service and support?
Positive
How was the initial setup?
I rate InsightIDR eight out of 10 for ease of setup. It takes about seven working days to deploy. We install a connector on the LAN, which links up to the cloud and becomes one of your event sources. Next, you need to integrate everything with the console.
What's my experience with pricing, setup cost, and licensing?
I rate InsightIDR six out of 10 for affordability. It isn't the cheapest solution I've seen, but it offers a greater value than less expensive competitors.
What other advice do I have?
I rate InsightIDR eight out of 10. It's worth a try. InsightIDR provides excellent visibility and threats. The network detection is fast, so you get alerts as soon as something happens.
showing 11 - 20