Sign in
Sign in
or
Create a new account
Agent Mode
Categories
Your Saved List Become a Channel Partner Sell in AWS Marketplace Amazon Web Services Home Help

InsightIDR - Next-gen SIEM

Rapid7

Reviews from AWS customer

4 AWS reviews

External reviews

85 reviews
from and

External reviews are not included in the AWS star rating for the product.

    Awais Sajid

An affordable product that is easy to use and has many advanced features and default templates

  • February 06, 2024
  • Review provided by PeerSpot

What is most valuable?

It’s a great tool. The solution helps us a lot in threat detection. It’s one of the most updated tools. The UI is very good. We can easily start using the tool and explore it. It also provides features like legacy UBA that other products do not provide. We can customize the rules from the default template in InsightIDR. UBA is a great feature.

When a new user is created in Active Directory, an investigation is created. We can use the default features to create an investigation. The solution has many advanced features and default templates that help protect from attacks without a user’s intervention. It is quite impressive.

What needs improvement?

The product allows us to make only 30 custom rules. The limit on custom rules must be changed.

For how long have I used the solution?

I have been working with the product for two months.

What do I think about the scalability of the solution?

We have deployed the solution in 28 offices. We are using the basic features for now.

How was the initial setup?

The initial setup is straightforward.

What's my experience with pricing, setup cost, and licensing?

We chose Rapid7 because of its price. IBM QRadar charges us based on data storage. Rapid7 InsightIDR charges us based on the endpoints we connect to. We are satisfied with the product’s price.

Which other solutions did I evaluate?

I have used IBM QRadar, Splunk, and Sentinel. We use Splunk in our offices, too. Compared to other products, Rapid7 InsightIDR’s UI is very good. It is very easy to handle. We are working with the tool currently and are quite satisfied with it.

What other advice do I have?

Overall, I rate the solution a nine out of ten.

    Construction

Robust monitoring for any situation

  • February 05, 2024
  • Review provided by G2

What do you like best about the product?
Insight IDR provides a detailed look at any event that might occur in your environment. It's flexible enough to plug into just about any situation and has the ability to monitor a number of 3rd party sources giving you a single view into your entire environment without having to go to multiple dashboards.
What do you dislike about the product?
There can be a lot of overhead and some of the integrations and monitoring especially for Windows devices can be a little clunky. Additional collector servers will be needed to gather the logs and these can be costly if you're running them in the cloud.
What problems is the product solving and how is that benefiting you?
Insight IDR provides us with the security tools we need to monitor and respond to events in our environment. Each alert includes a detailed reasoning for why it was generated in addition to remediation steps. It makes it easy to resolve issues and gives you the peace of mind knowing that everything is being monitored around the clock.

    Agustinus DWIJOKO

A tool to detect malicious activities and provide security to networks and endpoints

  • November 07, 2023
  • Review from a verified AWS customer

What is our primary use case?

Rapid7 InsightIDR helps me detect any malicious activities in any endpoints in my company.

How has it helped my organization?

I have seen that Rapid7 InsightIDR provides security to the networks and endpoints in the company.

What is most valuable?

With Rapid7 InsightIDR, you must install the Insight Agent, after which you may get to see some of the risks affecting endpoints.

What needs improvement?

The integration capabilities of the solution have certain shortcomings where improvements are required.

If possible, it would be great to see AI embedded in all the functionalities offered by the product.

For how long have I used the solution?

I have been using Rapid7 InsightIDR for four years. I use the solution's latest version since the version gets automatically updated as it is a cloud-based tool. I work as a distributor of the product.

What do I think about the stability of the solution?

Stability-wise, I rate the solution an eight out of ten.

What do I think about the scalability of the solution?

It is a scalable solution. Scalability-wise, I rate the solution an eight out of ten.

How was the initial setup?

The time required to complete the product's installation phase depends on the number of endpoints that a user has in their environment. Insight Agent can be deployed in a couple of minutes.

Five engineers in my company take care of the deployment phase of Rapid7 InsightIDR.

The solution is deployed on the public cloud services offered by AWS.

What's my experience with pricing, setup cost, and licensing?

Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight.

Which other solutions did I evaluate?

I did not evaluate any other options in the market against Rapid7 InsightIDR.

What other advice do I have?

I have never been involved with any maintenance process related to Rapid7 InsightIDR.

To those who plan to use the solution, I suggest that they undertake a training program to understand the product.

I rate the overall tool an eight out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)

    RicardoSilva3

A stable solution that works well for playbooks and viewing events

  • October 10, 2023
  • Review provided by PeerSpot

What is our primary use case?

Normally, we use the solution as an event viewer to collect and resume cases and playbooks.

What needs improvement?

The main problem lies in the processes within the client's operating systems. XDR is superior to CMs. Observing how the processes function within the machine is essential if you are monitoring the client or servers, and not only the event with the first or second line but the third line is most important.

For how long have I used the solution?

I've been familiar with the solution for six months.

What do I think about the stability of the solution?

The solution is very stable and works very well for what I need it to do. The solution is completely different in an experienced environment and a real environment.

Which solution did I use previously and why did I switch?

I have worked with Wazuh before, but only to try it. Wazuh is more or less the same as Rapid7 InsightIDR.

What other advice do I have?

I rate Rapid7 InsightIDR an eight out of ten.

    Information Technology and Services

Very facinating experience

  • September 26, 2023
  • Review provided by G2

What do you like best about the product?
Very Easy for usage and implementation. Good Customer support.
What do you dislike about the product?
Nothing to describe much as it is user friendly.
What problems is the product solving and how is that benefiting you?
Security related problems

    Durgaprasad L.

Excellent soc tools to have analysis

  • September 26, 2023
  • Review provided by G2

What do you like best about the product?
Its have features of integrated with active directory to check user details in detailed
It's very easy to approach
What do you dislike about the product?
No option to export daily alerts
It's should be very recommended for organisation to help for their approach of business possibilities
What problems is the product solving and how is that benefiting you?
It's user for deep analysis of any incident with approach of log analysis and detailed investigation
It's depends on the approach of user

    Information Technology and Services

InsightIDR is a highly effective and user-friendly cybersecurity solution.

  • September 19, 2023
  • Review provided by G2

What do you like best about the product?
The visibility and threat detection that InsightIDR offers for our organization's network is vital, making it a crucial component of our defence against cyberattacks. It is also very easy to use.
What do you dislike about the product?
Pricing: Although InsightIDR offers outstanding value for the services it delivers, smaller organisations with tighter budgets could discover its pricing to be on the expensive side.
What problems is the product solving and how is that benefiting you?
Cybersecurity-related issues are being addressed by InsightIDR, and the advantages it provides to organisations using it are significant. Here are some of the main issues that InsightIDR resolves and how those advantages might help your company:

Detecting threats in real time is where InsightIDR really shines. It recognises and notifies you of questionable actions, unauthorised access tries, and potential security breaches as they take place. With this skill, you can react quickly, reducing the potential harm and data loss brought on by cyberattacks.

    JensWolf

A solution that offers easy setup and deployment phases, along with great scalability and stability

  • September 19, 2023
  • Review provided by PeerSpot

What is our primary use case?

I use Rapid7 InsightIDR to collect logs and information from throughout our company's entire IT environment.

What is most valuable?

The most valuable feature of the solution is the single pane of glass that allows me to see all the information in one spot. I can see at one spot to see all the information from all the logs and everything.

What needs improvement?

Sometimes, it is hard to get the right queries to use. Currently, the tool lacks a pre-made set of queries. In the future, I would like the tool to offer its uses with a pre-made set of queries.

For how long have I used the solution?

I have been using Rapid7 InsightIDR for a year. I use the solution's latest version. My company is a customer of the solution.

What do I think about the stability of the solution?

The product works well. Stability-wise, I rate the solution a ten out of ten.

What do I think about the scalability of the solution?

I rate the product's scalability a ten out of ten since, scalability-wise, it is a really good tool.

Rapid7 InsightIDR is managed by four people in my company.

How are customer service and support?

The speed of response from the technical support team may vary since I purchased it from a reseller in Sweden and not from Rapid7 directly.

I rate the technical support a seven out of ten.

How would you rate customer service and support?

Neutral

Which solution did I use previously and why did I switch?

In the past, my company used Unomaly, a tool from Sweden. My company switched from Unomaly to Rapid7 InsightIDR after seeing that the former could only checked syslogs, while we wanted something that checked our overall systems.

How was the initial setup?

I rate the initial setup a ten out of ten.

The solution's initial setup was very straightforward.

The solution is deployed on an on-premises and cloud model. The cloud services are provided by Rapid7.

The solution can be deployed in half a day or four hours in a small environment.

I was the only person involved in the product's deployment phase.

What's my experience with pricing, setup cost, and licensing?

After considering the prices of the product's competitors, I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive. There may be some additional costs attached to the solution only if you want to buy a SOC or something. I don't have to pay for any additional costs at the moment.

What other advice do I have?

I suggest that those who plan to use the solution give it a try since it is free for a couple of months. The solution has really easy setup and deployment phases, and you can even remove it from your environment if you want to do so later.

I rate the overall product a nine out of ten.

    reviewer2275617

Lets you simplify threat detection and has a fast deployment

  • September 13, 2023
  • Review provided by PeerSpot

What is our primary use case?

The solution is used as a platform for a better understanding of the Intelligence products that different vendors sell.

What is most valuable?

Rapid7 is easy to use and deploy. It is a simple solution and has easy data pulling.

What needs improvement?

The APIs can be further improved in Rapid7.

For how long have I used the solution?

I have been using Rapid7 InsightIDR for two months.

What do I think about the stability of the solution?

It is stable solution.

What do I think about the scalability of the solution?

It is a scalable solution. Presently, there are only small businesses working with the solution.

How are customer service and support?

The technical support team is good.

How was the initial setup?

The initial setup is easy. The deployment took only half an hour. It's just a cloud platform. You just have to deploy a connector like Select Pro, and it will set the data from the on-premise. It will send it to the cloud platform, and you can have it installed in five to ten minutes.

What's my experience with pricing, setup cost, and licensing?

The pricing of the solution depends on the user. But there is a yearly licensing cost.

What other advice do I have?

It is a good solution but just has some API issues. I rate the solution an eight out of ten.

    Khizar Butt

A highly-rated entry-level SIEM solution that is ideal for SMBs

  • August 23, 2023
  • Review provided by PeerSpot

What is most valuable?

I like that it's a cloud-based solution. The features of all SIEM solutions are pretty much the same, but Rapid7 is user-friendly, totally cloud-based, and can integrate into the EDR solution whenever a customer wants it. Those are USPs for us.

What needs improvement?

Because Rapid7 was originally a vulnerability management solution, more and more companies are now moving towards their technologies and their existing SIEM applications and converting them to XDR solutions. Though Rapid7 provides its EDR option with SIEM, it has a long way to go to achieve an XDR status.

I would like to see more development in InsightIDR towards building their SIEM solution and converting it to XDR because every SIEM solution provider is moving their solutions toward XDR.

For how long have I used the solution?

I've been working with Rapid7 InsightIDR for two years.

What do I think about the stability of the solution?

The product is stable.

Which solution did I use previously and why did I switch?

We used to use QRadar in my previous company. The first difference is in the deployment architecture. QRadar comes with cloud and on-prem options. In countries like Pakistan, where I am from, there are very strict regulations for using cloud solutions, especially in the banking sector. Rapid7 only offers a SaaS-based SIEM.

The second difference between the two is in their licensing. Rapid7 InsightIDR license is applied based on the number of nodes and devices. QRadar, on the other hand, does licenses the events per second.

The third difference is in the threat intelligence QRadar provides, and there's a huge difference between the two in this domain. QRadar is an IBM product that is very old in the SIEM market and provides relatively better threat intelligence than players like Rapid7.

How was the initial setup?

The solution is easy to implement.

What's my experience with pricing, setup cost, and licensing?

Rapid7 InsightIDR is priced very well and is cost-effective.

Which other solutions did I evaluate?

Enterprise-level customers have better options, such as LogRhythm, QRadar, and Splunk. These products are core SIEM-based companies that are old players in this market. Rapid7 is a relatively new entrant in the SIEM market. However, it has strong capabilities, and customers trust big names, big companies they've known from the beginning, who have been working on SIEM solutions since inception.

What other advice do I have?

The benefit of the solution, first of all, is that it's cost-effective. It is also a Gartner leading solution, which provides more credibility in the customer's eyes. Eventually, it benefits us to translate that credibility into achieving more and more revenue through it.

I recommend Rapid7 InsightIDR for SMB companies because there are better options in the market for enterprises.

I rate the solution an eight out of ten.

showing 11 - 20