Rapid7 InsightIDR vs. Trellix Enterprise Security Manager

Rapid7 InsightIDR

Trellix Enterprise Security Manager

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
InsightIDR	Score 9.5 out of 10	N/A	In addition to their incident response service, Rapid7 offers InsightIDR, a combined XDR and SIEM that provides user behavior and threat analytics.	$5.89 per month per asset
Trellix Enterprise Security Manager	Score 8.6 out of 10	N/A	Trellix Enterprise Security Manager (formerly McAfee Enterprise Security Manager) is security information and event management (SIEM) software.	N/A

Pricing

Rapid7 InsightIDR

Trellix Enterprise Security Manager

Editions & Modules

InsightIDR Advanced: $5.89
per month per asset

No answers on this topic

Offerings

Pricing Offerings
InsightIDR	Trellix Enterprise Security Manager
Free Trial
Yes	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

Additional Details

*500 asset minimum. Billed annually. All amounts are shown in U.S. dollars. International prices vary.

—

More Pricing Information

Community Pulse
	Rapid7 InsightIDR	Trellix Enterprise Security Manager
Considered Both Products	InsightIDR Azhar Chaudri Cyber Security Training Specialist Chose InsightIDR N/A Incentivized Helpful? Varun Khare Senior Analyst Chose InsightIDR The biggest advantage it has the lightweight agent and smooth and less traffic chaos in network during log collection. Cloud Security always require extra efforts but InsightIDR reduce that burden as it has highly anticipated agents to which knows what they need to do when they … Incentivized Helpful? AE Allan Crittenden Edwards Security Analyst Chose InsightIDR Other products are OK, but they lack the robust permissions and their interfaces are much much less intuitive. Rapid7's prioritization system for vulnerabilities makes more sense given their context as the developers of Metasploit. We thought we might be able to switch and save … Incentivized Helpful? Bhuwan Chandra Business Development Manager Chose InsightIDR We tried other solutions, but our Network, which is mostly in different locations with different OEMS , was well suited by Rapid7. Rapid7 works with different workflows and SIEM solutions, which was a requirement of the SOC solution. Visibility allows the security operation to … Incentivized Helpful? Chris Goodhue Network Security Specialist Chose InsightIDR Have not used other tools Incentivized Helpful? Verified User Anonymous Chose InsightIDR Many of the top-tier providers of this technology do a comparable job. However, we selected Rapid7 because of their reputation in the area of user behavior analytics, cost, # of SOC locations (due to our selection of their MDR service), support, company growth in other areas … Incentivized Helpful? Verified User Anonymous Chose InsightIDR Both products would do what we needed them to, but Rapid7 InsightIDR made more sense from a cost perspective. We did a proof of concept of both products, and they were pretty evenly matched in their own ways. Forescout had a better interface, but in the end the interface of … Incentivized Helpful? SS SP Singh Sr. DE/ML Chose InsightIDR None. Incentivized Helpful? Verified User Anonymous Chose InsightIDR Between Rapid7 InsightIDR and Crowdstrike, we liked Rapid7 InsightIDR due to the functionality of the system and the features Rapid7 InsightIDR has. Rapid7 InsightIDR was very easy to deploy in our environment to our endpoint devices. We like the scanning capabilities and the … Incentivized Helpful?	Trellix Enterprise Security Manager Verified User Anonymous Chose Trellix Enterprise Security Manager McAfee Enterprise Security Manager is a better option than other security software because it's both inexpensive and extremely effective. Norton and other security software boast a high price tag but don't always back it up when it comes to performance. With McAfee Enterprise … Incentivized Helpful? Fernanda Ministerio Especialista de Desenvolvimento Industrial Chose Trellix Enterprise Security Manager Other evaluated products: Microsoft Defender and Symantec - McAffee has more comprehensive integrated tools that better serve our infrastructure - Analysts found the use of the tool more intuitive Incentivized Helpful? Verified User Anonymous Chose Trellix Enterprise Security Manager McAfee is not the easiest tool to use. The user interface (specially the admin part) is fairly confusing. At first, McAfee is very overwhelming and not so easy to understand. However, once you get used to the tool, you get used to the interface and you're able to do pretty much … Incentivized Helpful? Brandon Macapelit, CISA IT Auditor Chose Trellix Enterprise Security Manager We had used McAfee Enterprise Security Manager for a long time, and it served us well. It is great since it can serve as an all-in security tool. Also, it was a great deal for our organization, since it came bundled with our manager network security. Incentivized Helpful? NJ Neil Johnson CIO (Chief Information Officer) Chose Trellix Enterprise Security Manager We selected McAfee Enterprise Security Manager because the pricing is competitive in the industry. It is very reliable. The vendor offers good support in real time. Offers the results that we have been looking for. The ability to get the logs may be of last 2 years in a matter … Incentivized Helpful? Verified User Anonymous Chose Trellix Enterprise Security Manager We selected and implemented McAfee Enterprise Security Manager because is the best SIEM solution from the market. With a very good support from the vendor. Easy implementation and easy management. A lot of threats addressed. High level of security assured. Very good resilience. … Incentivized Helpful? Verified User Anonymous Chose Trellix Enterprise Security Manager Splunk tends to be the top dog in the space. Everything is compatible and it's capable of anything. You just have to have the time and money to do the work. And if you have a large volume of logs (and who doesn't?), it's not cheap. McAfee Enterprise Security Manager's advantage … Incentivized Helpful? PC Philip Clarke IT Systems/Security Manager Chose Trellix Enterprise Security Manager We looked at a few products, these were AlienVault, ESM, LogRhythm and Alert Logic. ESM at the time had more functionality and a friendlier and cleaner user interface than LogRhythm ESM had an ability to integrate easily into Intel's endpoint solution versus AlienVault where a … Incentivized Helpful? Alex Waitkus, CISSP-ISSAP, OSCP Security Architect Chose Trellix Enterprise Security Manager ESM is to top when it comes to central management. Yhe more tools it can manage the better. Incentivized Helpful?

Features

Rapid7 InsightIDR

Trellix Enterprise Security Manager

Security Information and Event Management (SIEM)

Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
	Rapid7 InsightIDR - Ratings	Trellix Enterprise Security Manager 8.4 Ratings 9% above category average
Centralized event and log data collection	00 Ratings	8.60 Ratings
Correlation	00 Ratings	7.00 Ratings
Event and log normalization/management	00 Ratings	8.00 Ratings
Deployment flexibility	00 Ratings	8.30 Ratings
Integration with Identity and Access Management Tools	00 Ratings	9.30 Ratings
Custom dashboards and workspaces	00 Ratings	9.30 Ratings
Host and network-based intrusion detection	00 Ratings	8.30 Ratings
Data integration/API management	00 Ratings	9.30 Ratings
Behavioral analytics and baselining	00 Ratings	8.60 Ratings
Rules-based and algorithmic detection thresholds	00 Ratings	8.60 Ratings
Response orchestration and automation	00 Ratings	8.00 Ratings
Reporting and compliance management	00 Ratings	8.60 Ratings
Incident indexing/searching	00 Ratings	7.60 Ratings

Best Alternatives
	Rapid7 InsightIDR	Trellix Enterprise Security Manager
Small Businesses	Bitdefender GravityZone Score 9.1 out of 10	LevelBlue USM Anywhere Score 3.8 out of 10
Medium-sized Companies	CrowdStrike Falcon Score 9.0 out of 10	Sumo Logic Score 9.4 out of 10
Enterprises	CrowdStrike Falcon Score 9.0 out of 10	Sumo Logic Score 9.4 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	Rapid7 InsightIDR	Trellix Enterprise Security Manager
Likelihood to Recommend	9.9 (0 ratings)	9.0 (0 ratings)
Support Rating	- (0 ratings)	6.5 (0 ratings)

User Testimonials
	Rapid7 InsightIDR	Trellix Enterprise Security Manager
Likelihood to Recommend	It has been brilliant for us in terms of understanding the behaviour affecting our endpoints and assets. We have full visibility of our alerts, which menas we can act on them immediately. We use a single pain of glass with dashboards that can be easily drilled down into to get further information. It has laso helped us eo create bespoke reports for senios Managmeent, while at the same time supports other teams like Network Mnagement and Operations. Incentivized Azhar Chaudri Cyber Security Training Specialist Read full review	McAfee is a good solution if you're in a medium/large company and if you're looking for a solution that can be customized and expanded. I also recommend if you have the most common log sources on your environment, since McAfee supports the major log sources (but lack a lot of small vendors). In my opinion, I wouldn't recommend McAfee for small companies, since it's not that easy to manage and maintain. Incentivized Verified User Anonymous Read full review
Pros	Rapid7 InsightIDR does a very good job at keeping virus definitions up to date so that our threat intelligence is very up to date when knowing what to protect against. It helps us by scanning all of our infrastructure components and highlights where improvements need to be made in security so we can be proactive with our security initiatives. It has automated response mechanisms to triage and resolve any potentials risks allowing us to save time in the long run. Incentivized Verified User Anonymous Read full review	McAfee Enterprise Security Manager has a large library of pre-made correlations that reduces the amount of work needed to make it functional. This is a core McAfee product that is still getting support. It has a substantial amount of compatibility and integration with other products. Incentivized Verified User Anonymous Read full review
Cons	Sometimes Rapid7 InsightIDR will be too locked down and without knowing will block applications and processes needed for day to day operation. System scans with Rapid7 InsightIDR can be very bandwidth-heavy on the network and system resources. From a recent incident, we have seen more and more false positives from Rapid7 InsightIDR on areas that we know are secure. Incentivized Verified User Anonymous Read full review	If there is a requirement to integrate into other vendor products i.e. (log sharing) then this was very cumbersome. Integration of vulnerability scanning that is available in other vendor products would be a good addition. When integrating all of Intel's products a third party consultancy is usually required, where other vendor products can be configured without this additional cost. Incentivized PC Philip Clarke IT Systems/Security Manager Read full review
Support Rating	No answers on this topic	Dealing with the McAfee support is a lottery. Sometimes you reach them and it's a really experienced engineer, but sometimes it's a person with no clue on the tool. We had few cases where our internal engineers knew more about the tool than the McAfee support. However, sometimes we get hold of some really good engineers that know the tool from inside out Incentivized Verified User Anonymous Read full review
Alternatives Considered	Between Rapid7 InsightIDR and Crowdstrike, we liked Rapid7 InsightIDR due to the functionality of the system and the features Rapid7 InsightIDR has. Rapid7 InsightIDR was very easy to deploy in our environment to our endpoint devices. We like the scanning capabilities and the console we felt was very easy to use and can be easily caught up to our IT staff. Also during vulnerability scans, we felt that Rapid7 InsightIDR was able to detect more and any competitor out there. Incentivized Verified User Anonymous Read full review	McAfee Enterprise Security Manager is a better option than other security software because it's both inexpensive and extremely effective. Norton and other security software boast a high price tag but don't always back it up when it comes to performance. With McAfee Enterprise Security Manager, I know I'm getting a quality product for a fair price. Incentivized Verified User Anonymous Read full review
Return on Investment	Rapid7 InsightIDR has allowed us to be proactive in securing our systems as the vulnerability scans give us a lens at what we need to fortify when it comes to security. In recent incidents its allowed us to save time and money as it mostly detects issues accurately and we are able to bring systems back quickly without too much downtime for the business. With recent updates, we are confident that Rapid7 InsightIDR is a good solution for the long run as they are always making adjustments to their platform and improving it with every release. Incentivized Verified User Anonymous Read full review	It effectively blocks potential attacks from outside. It aids us in doing more effective root-cause analysis whenever an incident occurs, since it gives us enough details to understand what went wrong. Incentivized Brandon Macapelit, CISA IT Auditor Read full review
ScreenShots