Illumio Insights is a cloud detection and response (CDR) tool that utilizes an AI powered security graph. Experience the power of the AI security graph to identify and contain threats with one click.
Illumio Insights is designed for hyper-scale functionality across hybrid and multi-cloud environments. Insights offers comprehensive, real-time visibility into an organizations security landscape, covering all connected resources and data flows.
By integrating with Illumio Segmentation, threats identified within environments can be quickly contained, and affected resources can be instantly quarantined.
Illumio Insights is particularly beneficial for the Blue Team, consisting of SOC analysts, incident responders, and threat hunters. It enables them to visualize and prioritize lateral movement risks across various environments, to facilitate rapid detection, identification, and response of threats.
With Insights, organizations gain,
Instant, agentless observability at scale. Visualize and understand connectivity across cloud and container environments using AI-driven flow decoration and threat labeling, which helps assess, triage, and confirm security events in cloud environments.
AI-driven threat detection and prioritization. Make swift, informed decisions in response to active attackers by revealing otherwise unseen attacker tactics, techniques, and procedures, as well as their lateral movement across cloud resources.
Effective threat mitigation with one-click containment. Neutralize potential threats with a one-click dynamic quarantine feature, containing and isolating compromised resources and dramatically reducing the Mean Time to Respond.
Highlights
See risk. Visualize all communication and traffic between workloads and devices across the entire hybrid attack surface. Gain visibility with real-time telemetry and data, understand application communications, security policy, usage, access and security exposure with a comprehensive map of traffic flows.
Set policy. Comprehensive monitoring and simplified labeling that helps eliminate blind spots by automatically setting granular and flexible segmentation policies that control communication between workloads and devices to only allow what is necessary and wanted.
Stop the spread. Proactively isolate high-value assets or reactively isolate compromised systems during an active attack to stop the spread of a breach by programming dynamic workload policies for hybrid multi-cloud networks and endpoints, and applying automated policy recommendations.
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Illumio Insights is offered here as a single Free Trial option. You pay nothing to start and can begin in a sandboxed environment with demo data, then add your own cloud data. The trial runs for 14 days, and it expires automatically if no data is ingested within 7 days. There are no tiers, instance sizes, or usage add-ons to choose from at this stage. After the trial ends, pricing is not published here. You contact Illumio directly to arrange pricing for continued use.
Top-of-mind questions for buyers
What data does Illumio Insights ingest during the trial, and what access do I grant?
You grant read-only access to your cloud flow logs — network traffic metadata showing which resources communicate, traffic patterns, and connection details like IPs and ports. Illumio cannot create, modify, or delete resources, and does not access your files or application content. Access reads existing logs only, with no agents installed.
How is a workload counted for Illumio Insights, and what data volume does each include?
Each cloud virtual machine or database counts as one workload. A container cluster host counts as two workloads. Ten cloud network interfaces count as one workload. Each cloud workload includes 50MB per day of data processing. These counts determine sizing when you contact Illumio for pricing after the trial.
Will running Illumio Insights affect my cloud performance or add cost during the trial?
No. The trial is free and reads existing flow logs only. It does not generate extra network traffic, install agents on servers, create monitoring overhead, or affect application performance. Your data stays in your specified region and is deleted when the trial ends.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Illumio provides customers with 24/7 support by phone, email, and through our support portal. +1 888 631 6354 or support@illumio.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Illumio Zero Trust Segmentation (ZTS) Platform is the only solution that handles it all: Endpoint-Endpoint, Endpoint-Server, Server-Server, as well as extensive support for cloud workloads, containers, IoT, and OT devices. Empowering organizations to be more resilient for whatever may come their way. ZTS contains the spread of breaches and ransomware across the hybrid attack surface by continually visualizing how workloads and devices are communicating, creating granular policies that only allow wanted and necessary communication, and automatically isolating breaches by restricting lateral movement proactively or during an active attack.
In addition, Illumio ZTS includes the Illumio Virtual Advisor (IVA) which provides actionable, AI driven guidance for even the most complex tasks. With IVA, teams can streamline their workflows with instant, expert-level answers to their questions. Quickly access critical information and achieve complex tasks simply by asking the virtual advisor.
llumio offers a comprehensive suite of Professional Services to ensure an effective design, installation, and configuration of the Illumio Breach Containment Platform within your environment. We also offer various training programs to educate your teams to maximize your investment.
We implement Illumio Zero Trust Segmentation to secure your workloads across data center, cloud, and hybrid environments. From initial design to policy enforcement - we deliver full-stack microsegmentation and traffic visibility.
Excellent Value, Flexible Network Security with Real-Time Visibility
Reviewed on Jul 22, 2026
Review provided by G2
What do you like best about the product?
The application is an excellent tool that can manage almost everything across your infrastructure and secure your network without exposing it. Based on the market, I found it the best value-for-money solution with a lot of flexibility to work with. The instant performance of the system gives you real-time visibility into the activity within your network. You can integrate with any cloud options, and the best part is the support you receive from them.
What do you dislike about the product?
It is not a dislike as such, but it will need to be improved
What problems is the product solving and how is that benefiting you?
We help us resolve a lot of isolations that we need to perform in our infra.
Aman M.
Effortless Cost Optimization and Integration
Reviewed on Jul 21, 2026
Review provided by G2
What do you like best about the product?
I think Illumio is an easy-to-use product that's been helping me quite a lot with the portfolio of customers that I manage. I think it's a good tool to leverage. I also find the complete suite to be a good one. The initial setup was easy, with a team of experts that made the implementation less complicated and fairly simple. Overall, it's a product that helps us at a larger enterprise level.
What do you dislike about the product?
Nothing much but the UI could be a bit more simpler
What problems is the product solving and how is that benefiting you?
I use Illumio for cost optimizations and tech recoveries, leveraging it to save on costs and plan for ROI. It's an easy-to-use product that helps manage my customer portfolio effectively.
Himanshu S.
Effective Micro-Segmentation with Great Enterprise Visibility
Reviewed on Jul 17, 2026
Review provided by G2
What do you like best about the product?
I use Illumio for its core micro-segmentation functionality. I like that it provides visibility which is really useful for big enterprises. After installation, it created a map of all workloads, helping to restrict lateral movement and better identify and map our environment. I also found the initial setup very easy, with a professional team providing guidance and support at every stage.
What do you dislike about the product?
I believe Illumio needs to enhance their solution in container environments so they can offer enforcement with an agentless solution.
What problems is the product solving and how is that benefiting you?
I find that Illumio limits the damage of potential breaches by restricting lateral movement. We gain visibility with its core functionality, and it creates a map of our workloads, helping us identify and map our environment better.
Sidhant G.
Simplifying Zero Trust, Strengthening Security
Reviewed on Jul 15, 2026
Review provided by G2
What do you like best about the product?
As someone who works closely with customers, I like that Illumio helps translate Zero Trust concepts into tangible security outcomes. It gives customers better visibility, stronger protection, and confidence in their security posture.
What do you dislike about the product?
Nothing major, just think some workflows could be a bit more intuitive.
What problems is the product solving and how is that benefiting you?
Illumio helps simplify Zero Trust by providing better visibility and controlling lateral movement across workloads. It benefits me by making it easier to design solutions that address real customer challenges and deliver measurable security improvements.
Eric Mui
Micro-segmentation has improved threat visibility and supports ongoing zero-trust monitoring
Reviewed on Jun 22, 2026
Review provided by PeerSpot
What is our primary use case?
Illumio Insights plays its own role in enhancing threat visibility. Illumio Insights performs micro-segmentation according to the traffic, determining whether to trust it, allow it, or block it. Micro-segmentation is also a network access control at the network level. It does not understand or read the contents inside packets; it is not a WAF that can block SQL injection or web injection. It operates only at the TCP level and network level.
What is most valuable?
I use Illumio Insights' real-time analytics for micro-segmentation and zero-trust monitoring, which allows for analysis. However, the product coverage is not very broad, so I have to do my own filtering and analysis, and integration with other tools is necessary. The reporting and analysis features are not ready out of the product itself.
What needs improvement?
Deployment of Illumio Insights was not difficult, but the difficulty depends on how micro your design is. For Docker containers, it is not quite suitable for that kind of application traffic. For container architectures, it is not quite designed that way. For normal VMs it might be acceptable, but for container architectures, I cannot be as micro-segmented as I want to be.
Illumio Insights is not very well designed for containers, which is one of the drawbacks and weak sides of the product.
I use Illumio Insights' real-time analytics for micro-segmentation, and beyond zero-trust monitoring, I also want to do analysis. However, the product coverage is not very broad, so I have to do my own filtering and analysis, and integration with other tools is necessary. The reporting and analysis are not ready out of the product itself.
Reporting is another area for improvement in this product and is not very sufficient, so I have to further integrate or do it on my own.
Illumio Insights is stable and a mature product. The functionality, such as reporting and analysis, may extend in the roadmap, but it has not in the past. The current functionality is adequate and quite mature, which is how I chose it based on maturity and market share. However, it is not very modern for Kubernetes and containers. If this functionality can extend, that would be a valuable roadmap addition.
Streamline integration with Illumio Insights does not help me much since it does not require too much integration with my other operations.
For how long have I used the solution?
I have been using Illumio Insights for about five years.
What do I think about the stability of the solution?
Illumio Insights is stable and a mature product.
What do I think about the scalability of the solution?
The entire project depends on the scale of my farm. With my farm being not too small and not too big, it took more than one year to implement Illumio Insights because it had to be done in phases. It can affect the application traffic and cause issues. I could not implement it from design to implementation in a short time; it takes a while because it really depends on the scale.
How are customer service and support?
The support is reasonable.
What about the implementation team?
About two people participated in the deployment during this year. I was not directly involved; some team members participated in the deployment process for Illumio Insights.