Microsoft Sentinel vs. Rapid7 InsightIDR

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Microsoft Sentinel
Score 8.4 out of 10
N/A
Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.
$2.46
per GB ingested
InsightIDR
Score 9.5 out of 10
N/A
In addition to their incident response service, Rapid7 offers InsightIDR, a combined XDR and SIEM that provides user behavior and threat analytics.
$5.89
per month per asset
Pricing
Microsoft SentinelRapid7 InsightIDR
Editions & Modules
Azure Sentinel
$2.46
per GB ingested
100 GB per day
$123.00
per day
200 GB per day
$221.40
per day
300 GB per day
$319.80
per day
400 GB per day
$410.00
per day
500 GB per day
$492.00
per day
More than 500 GB per day
$492.00 + $98.40
per day/plus each additional 100 GB increment
InsightIDR Advanced
$5.89
per month per asset
Offerings
Pricing Offerings
Microsoft SentinelInsightIDR
Free Trial
YesYes
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details*500 asset minimum. Billed annually. All amounts are shown in U.S. dollars. International prices vary.
More Pricing Information
Community Pulse
Microsoft SentinelRapid7 InsightIDR
Considered Both Products
Microsoft Sentinel

No answer on this topic

InsightIDR
Chose Rapid7 InsightIDR
The biggest advantage it has the lightweight agent and smooth and less traffic chaos in network during log collection. Cloud Security always require extra efforts but InsightIDR reduce that burden as it has highly anticipated agents to which knows what they need to do when they …
Features
Microsoft SentinelRapid7 InsightIDR
Security Information and Event Management (SIEM)
Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
Microsoft Sentinel
7.2
24 Ratings
7% below category average
Rapid7 InsightIDR
-
Ratings
Centralized event and log data collection8.224 Ratings00 Ratings
Correlation7.024 Ratings00 Ratings
Event and log normalization/management6.924 Ratings00 Ratings
Deployment flexibility7.122 Ratings00 Ratings
Integration with Identity and Access Management Tools6.522 Ratings00 Ratings
Custom dashboards and workspaces7.524 Ratings00 Ratings
Host and network-based intrusion detection5.120 Ratings00 Ratings
Data integration/API management6.422 Ratings00 Ratings
Behavioral analytics and baselining6.520 Ratings00 Ratings
Rules-based and algorithmic detection thresholds7.822 Ratings00 Ratings
Response orchestration and automation7.321 Ratings00 Ratings
Reporting and compliance management9.04 Ratings00 Ratings
Incident indexing/searching8.422 Ratings00 Ratings
Best Alternatives
Microsoft SentinelRapid7 InsightIDR
Small Businesses
LevelBlue USM Anywhere
LevelBlue USM Anywhere
Score 4.4 out of 10
SentinelOne Singularity
SentinelOne Singularity
Score 8.7 out of 10
Medium-sized Companies
Sumo Logic
Sumo Logic
Score 9.3 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
Enterprises
Sumo Logic
Sumo Logic
Score 9.3 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Microsoft SentinelRapid7 InsightIDR
Likelihood to Recommend
8.4
(43 ratings)
9.9
(12 ratings)
Likelihood to Renew
8.2
(1 ratings)
-
(0 ratings)
Usability
7.3
(4 ratings)
-
(0 ratings)
Support Rating
8.0
(3 ratings)
-
(0 ratings)
Professional Services
5.0
(1 ratings)
-
(0 ratings)
User Testimonials
Microsoft SentinelRapid7 InsightIDR
Likelihood to Recommend
Microsoft
Microsoft Sentinel excels in centralized monitoring, AI-driven threat detection, and automation, but improvements in cost transparency, user experience, third-party integrations, and support for emerging technologies could make it even more effective. Addressing these areas would enhance its appeal for small-to-medium businesses, large enterprises, and organizations with complex or specialized IT environments.
Read full review
Rapid7
It has been brilliant for us in terms of understanding the behaviour affecting our endpoints and assets. We have full visibility of our alerts, which menas we can act on them immediately. We use a single pain of glass with dashboards that can be easily drilled down into to get further information. It has laso helped us eo create bespoke reports for senios Managmeent, while at the same time supports other teams like Network Mnagement and Operations.
Read full review
Pros
Microsoft
  • I appreciate that it keeps the data within our, what we call our, authorization boundary. The fact that the data remains within Microsoft's, I guess, walled garden if you will, is very helpful for certain compliance needs in particular.
  • The large library of ingestion: ability to ingest is basically as easy as I can basically get it to be most of the time. There's occasionally some vendors that it's a little bit more challenging for, but given the ease of integration for a lot of things, basically it's become one of my requirements when I am looking at other tools is how easily do they integrate with Sentinel.
Read full review
Rapid7
  • Rapid7 InsightIDR does a very good job at keeping virus definitions up to date so that our threat intelligence is very up to date when knowing what to protect against.
  • It helps us by scanning all of our infrastructure components and highlights where improvements need to be made in security so we can be proactive with our security initiatives.
  • It has automated response mechanisms to triage and resolve any potentials risks allowing us to save time in the long run.
Read full review
Cons
Microsoft
  • I think it should include more third party integration with non microsoft products as well as with other cloud providers. These integrations should be native.
  • It should improve ML and AI capabilities.
  • I find its documentation a little bit difficult to understand at the start. So the words should be simple.
Read full review
Rapid7
  • Sometimes Rapid7 InsightIDR will be too locked down and without knowing will block applications and processes needed for day to day operation.
  • System scans with Rapid7 InsightIDR can be very bandwidth-heavy on the network and system resources.
  • From a recent incident, we have seen more and more false positives from Rapid7 InsightIDR on areas that we know are secure.
Read full review
Likelihood to Renew
Microsoft
it does the job reasonably well
Read full review
Rapid7
No answers on this topic
Usability
Microsoft
The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer.
Read full review
Rapid7
No answers on this topic
Support Rating
Microsoft
Azure Sentinel is very easy to use and configure. If you are stuck somewhere, Microsoft support is excellent in assisting and solving your issue.
Read full review
Rapid7
No answers on this topic
Alternatives Considered
Microsoft
We decided to go with Microsoft Sentinel because it works really well with Microsoft tools we are already using. Microsoft Sentinel's intelligent features detect and resolve problems more quickly than Sumo Logic. It also allows us to pay for what we use and grow as we need. While Sumo Logic is good at analyzing data, Microsoft Sentinel fits our needs.
Read full review
Rapid7
The biggest advantage it has the lightweight agent and smooth and less traffic chaos in network during log collection. Cloud Security always require extra efforts but InsightIDR reduce that burden as it has highly anticipated agents to which knows what they need to do when they captured malicious traffic.log collection and threat intelligence is major part in and xdr and here it stand out along others in the market, I started my career as qualys administration but I like InsightIDR much now.
Read full review
Professional Services
Microsoft
Did not use professional services
Read full review
Rapid7
No answers on this topic
Return on Investment
Microsoft
  • As any cybersecurity product, this has to be more with risk to avoid loss in case of a ransomware that more than relate to a productivity increase. Maybe the impact could be that instead of having people that are checking 24/7 the dashboard, you could implement Sentinel and have less people checking that or people with less expertise. So the saving will be a minor but will be a saving in the cost of your team.
Read full review
Rapid7
  • Rapid7 InsightIDR has allowed us to be proactive in securing our systems as the vulnerability scans give us a lens at what we need to fortify when it comes to security.
  • In recent incidents its allowed us to save time and money as it mostly detects issues accurately and we are able to bring systems back quickly without too much downtime for the business.
  • With recent updates, we are confident that Rapid7 InsightIDR is a good solution for the long run as they are always making adjustments to their platform and improving it with every release.
Read full review
ScreenShots

Microsoft Sentinel Screenshots

Screenshot of Screenshot of Screenshot of Microsoft Sentinel Capabilities