TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    InsightIDR

    Score9.5 out of 10
    N/AIn addition to their incident response service, Rapid7 offers InsightIDR, a combined XDR and SIEM that provides user behavior and threat analytics.

    $5.89

    per month per asset

    Splunk Cloud Platform

    Score7.8 out of 10
    N/ASplunk Cloud Platform is a data platform service thats help users search, analyze, visualize and act on data. The service can go live in as little as two days, and with an IT backend managed by Splunk experts.N/A
    Pricing
    InsightIDRSplunk Cloud Platform
    Editions & Modules
    InsightIDR Advanced
    $5.89
    per month per asset
    No answers on this topic
    Offerings
    Pricing Offerings
    InsightIDRSplunk Cloud Platform
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details*500 asset minimum. Billed annually. All amounts are shown in U.S. dollars. International prices vary.—
    More Pricing Information
    Community Pulse
    InsightIDRSplunk Cloud Platform
    Considered Both Products
    Rapid7
    No answer on this topic
    Cisco
    No answer on this topic
    Key User Insights
    Would buy again
    100%
    Would buy again
    12 Answers
    100%
    Would buy again
    9 Answers
    Delivers good value for the price
    91%
    Delivers good value for the price
    10 Answers
    88%
    Delivers good value for the price
    7 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    12 Answers
    100%
    Happy with the feature set
    9 Answers
    Lived up to sales and marketing promises
    100%
    Lived up to sales and marketing promises
    12 Answers
    88%
    Lived up to sales and marketing promises
    7 Answers
    Implementation went as expected
    100%
    Implementation went as expected
    12 Answers
    100%
    Implementation went as expected
    9 Answers
    Features
    InsightIDRSplunk Cloud Platform
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Rapid7 InsightIDR and Splunk Cloud Platform
    Feature
    Rapid7 InsightIDR
    -
    Ratings
    Splunk Cloud Platform
    9.0
    15 Ratings
    15% above category average
    Centralized event and log data collection00 Ratings9.015 Ratings
    Correlation00 Ratings9.715 Ratings
    Event and log normalization/management00 Ratings9.715 Ratings
    Deployment flexibility00 Ratings9.015 Ratings
    Integration with Identity and Access Management Tools00 Ratings9.313 Ratings
    Custom dashboards and workspaces00 Ratings9.715 Ratings
    Host and network-based intrusion detection00 Ratings8.613 Ratings
    Data integration/API management00 Ratings8.65 Ratings
    Behavioral analytics and baselining00 Ratings9.04 Ratings
    Rules-based and algorithmic detection thresholds00 Ratings8.46 Ratings
    Response orchestration and automation00 Ratings8.04 Ratings
    Reporting and compliance management00 Ratings8.76 Ratings
    Incident indexing/searching00 Ratings9.36 Ratings
    Best Alternatives
    InsightIDRSplunk Cloud Platform
    Small Businesses
    Sophos Intercept X for Server
    Score7.3 out of 10
    No answers on this topic
    Medium-sized Companies
    Microsoft Defender XDR
    Score8.9 out of 10
    IBM Security QRadar SIEM
    Score9 out of 10
    Enterprises
    Kaspersky EDR Optimum
    Score9.2 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    InsightIDRSplunk Cloud Platform
    Likelihood to Recommend
    10.0
    (12 ratings)
    9.9
    (15 ratings)
    Usability
    -
    (0 ratings)
    8.0
    (1 ratings)
    Support Rating
    -
    (0 ratings)
    7.2
    (4 ratings)
    User Testimonials
    InsightIDRSplunk Cloud Platform
    Likelihood to Recommend
    Rapid7
    It has been brilliant for us in terms of understanding the behaviour affecting our endpoints and assets. We have full visibility of our alerts, which menas we can act on them immediately. We use a single pain of glass with dashboards that can be easily drilled down into to get further information. It has laso helped us eo create bespoke reports for senios Managmeent, while at the same time supports other teams like Network Mnagement and Operations.
    Incentivized
    Read full review
    Cisco
    Splunk is excellent when all your data is in one location. Its ability to correlate all that data is intuitive (once the hurdle of learning the query language is overcome). It is also easy to standardize the presentation of information to the company. When data is siloed/standalone, other systems can be cheaper and faster to implement.
    Incentivized
    Read full review
    Pros
    Rapid7
    • Rapid7 InsightIDR does a very good job at keeping virus definitions up to date so that our threat intelligence is very up to date when knowing what to protect against.
    • It helps us by scanning all of our infrastructure components and highlights where improvements need to be made in security so we can be proactive with our security initiatives.
    • It has automated response mechanisms to triage and resolve any potentials risks allowing us to save time in the long run.
    Incentivized
    Read full review
    Cisco
    • This SIEM consolidates multiple data points and offers several features and benefits, creating custom dashboards and managing alert workflows.
    • Splunk Cloud provides a simple way to have a central monitoring and security solution. Though it does not have a huge learning curve, you should spend some time learning the basics.
    • Splunk Cloud enables me to create and schedule statistical reports on network use for Management.
    Incentivized
    Read full review
    Cons
    Rapid7
    • Sometimes Rapid7 InsightIDR will be too locked down and without knowing will block applications and processes needed for day to day operation.
    • System scans with Rapid7 InsightIDR can be very bandwidth-heavy on the network and system resources.
    • From a recent incident, we have seen more and more false positives from Rapid7 InsightIDR on areas that we know are secure.
    Incentivized
    Read full review
    Cisco
    • The SPL programming language that the queries are built in is not very intuitive.
    • There should be a better repository of pre-built queries for what I would think of as common Active Directory usage monitoring.
    • I would like to see more free training/familiarization information made available.
    Incentivized
    Read full review
    Likelihood to Renew
    Rapid7
    No answers on this topic
    Cisco
    Ease of use and have all the features we need
    Incentivized
    Read full review
    Usability
    Rapid7
    No answers on this topic
    Cisco
    What it does well:
    - Powerful SPL query language for advanced users
    - Excellent visualization dashboards
    - Comprehensive documentation and community support
    Where it needs work:
    - Steep learning curve for SPL syntax
    - Non-Intuitive UI for beginners
    - Complex administration and data model configuration
    - Search performance degrades with poor query optimization
    Bottom line: Enterprise-grade tool requiring dedicated training investment. Best for teams with experienced analysts.
    Incentivized
    Read full review
    Support Rating
    Rapid7
    No answers on this topic
    Cisco
    Splunk Cloud support is sorely lacking unfortunately. The portal where you submit tickets is not very good and is lacking polish. Tickets are left for days without any updates and when chased it is only sometimes you get a reply back. I get the feeling the support team are very understaffed and have far too much going on. From what I know, Splunk is aware of this and seem to be trying to remedy it.
    Incentivized
    Read full review
    Alternatives Considered
    Rapid7
    The biggest advantage it has the lightweight agent and smooth and less traffic chaos in network during log collection. Cloud Security always require extra efforts but InsightIDR reduce that burden as it has highly anticipated agents to which knows what they need to do when they captured malicious traffic.log collection and threat intelligence is major part in and xdr and here it stand out along others in the market, I started my career as qualys administration but I like InsightIDR much now.
    Incentivized
    Read full review
    Cisco
    Search Processing Language really is a game changer for writing easy-to-understand and maintainable queries on your data base logs. Once understood, setting up and validating a query can be done in no time- which leaves us the option to focus on more monitoring and improved services. We have no other tools that utilizes data this efficiently
    Incentivized
    Read full review
    Return on Investment
    Rapid7
    • Rapid7 InsightIDR has allowed us to be proactive in securing our systems as the vulnerability scans give us a lens at what we need to fortify when it comes to security.
    • In recent incidents its allowed us to save time and money as it mostly detects issues accurately and we are able to bring systems back quickly without too much downtime for the business.
    • With recent updates, we are confident that Rapid7 InsightIDR is a good solution for the long run as they are always making adjustments to their platform and improving it with every release.
    Incentivized
    Read full review
    Cisco
    • End-end visibility across your departmental silos
    • Strengthen the overall global monitoring posture
    • Move from Reactive to Proactive Monitoring
    • Highly secure environment at your finger-tips
    • Takes you away from managing infrastructure/administration, allows saving time & money. Reduce the overall TCO (Total Cost of Ownership)
    Incentivized
    Read full review
    ScreenShots