TrustRadius: an HG Insights company

InsightIDR

Score9.5 out of 10

42 Reviews and Ratings

Get a Demo

What is InsightIDR?

In addition to their incident response service, Rapid7 offers InsightIDR, a combined XDR and SIEM that provides user behavior and threat analytics.

Categories & Use Cases

Reviews

What users are saying about InsightIDR.
View all reviews

Superb, multi-faceted, multi-featured, multi-purpose Detection and Response tool

Incentivized
Azhar ChaudriView profile
Cyber Security Training Specialist in Information Technology at The Knowledge Academy (501-1000 employees employees)

Use Cases and Deployment Scope

We use it mainly as our incident detection and response application of choice, but it has helped us out enormously with its feature rich capabilities in numerous other areas. InsightIDR provides us with a single pane of glass view that allows us to have maximum visibility of our endpoints, while being aware of all assets, even newly created ones. It also allows us the ability to view and act on alerts in real time by conducting deep root cause analysis with additional functions. Our installation is cloud based so we have integration with other applications. Additionally, Reports can be formulated with ease and convenience and on a bespoke basis.

Pros

  • Alerts detection
  • Simple and effective monitoring of endpoints
  • Allows all security incidents to be saved in single pane of glass
  • Intuitive approach to sorting Logs in terrms of labelling and importance
  • Straightforward reporting tool, that allows for numerous types of reports to be created
  • Dashboards feature lots of detail

Cons

  • Sometimes there is lag and latency when we have heavy date loads
  • Integration with certain APIs are not easy and always straighfroward
  • Automation is a bit limited.

Most Important Features

  • Improved Visibility of Alerts
  • Simple and clear collection of detected incidents
  • Log usage and managment has been made easier
  • Safe and secure Cloud implementation and then integration with APIs

Return on Investment

  • Greater cost effective visibility of all alerts and incidents
  • Complete integration with other applications and APIs
  • Full Security orchestration with single pain of glass. Nothing is missed, so no ectra cots have to be incurred with impelmenting other software
  • Fantastic excellent reporting tool

Completed Umbrella Suite for Overall Cyber Risk

Incentivized
Varun KhareView profile
Senior Analyst in Information Technology at Western Union (10,001+ employees employees)

Use Cases and Deployment Scope

We as a financial services provider required to adhare with customer need which is security in current world and to protect those we have to secure our network and endpoint with every single possible attack scenario which are actively and passively try to invade and can cause problems. These infra includes cloud platform which includes AWS, Azure and Oracle and some in-house data centres so get a smooth coverage we used InsightIDR to bring everything under one umbrella.

Pros

  • Endpoint protection
  • SIEM
  • Integration with Various other sec tools

Cons

  • Asset Management
  • Segmentation
  • False positives are high
  • Dashboarding can be improved

Most Important Features

  • Incident detection and response
  • Higher network visibility
  • Reporting

Return on Investment

  • Minimising the Risk
  • Lowering Manual Efforts
  • Time

Alternatives Considered

Microsoft Sentinel and Qualys Context XDR

Other Software Used

Qualys Cloud Platform, Tenable Cloud Security, Microsoft Sentinel

InsightIDR is still providing value years after implementation.

Incentivized
Allan Crittenden EdwardsView profile
Security Analyst in Information Technology at Eastern Michigan University (1001-5000 employees employees)

Use Cases and Deployment Scope

When I arrived at my org vulnerability management was done ad hoc using an inexpensive NESSUS license. But this didn't provide results in a good manageable format. The idea was to be able to automate regular scanning and present the results in a format that would allow responsible asset owners to see the status of their systems and insofar as possible make it a self-service experience, taking as much burden off the security team as possible. InsightIDR has made this possible, and gone further through our use of the agent for detailed on device results.

Pros

  • Scanning
  • Vulnerability context
  • Multi-user/group usage

Cons

  • Allowing group owners to scan assets
  • There is an occasional false positive

Most Important Features

  • Vulnerability scanning
  • Agent scanning
  • Robust permissions

Return on Investment

  • Identified vulnerabilities before they were exploited and became catastrophes
  • Allows us to meet compliance goals

Alternatives Considered

Tenable Nessus and Tenable Security Center

Rapid7 InsightIDR Security Framework for Digital security.

Bhuwan ChandraView profile
Business Development Manager in Sales at ConnectUp IT Solutions (11-50 employees employees)

Use Cases and Deployment Scope

Rapid7 InsightIDR helps in the early detection & response of threats, integration with other technologies for in-depth strategy & ultimately threat hunting. Early detection help organization detect attacker in the first stage of the kill chain. By in-depth use case helps to get intelligence of malware tactics protecting from the malware but also helps in to detect such malware in the future also.

Pros

  • Deceive Expose & Eliminate threats.
  • Attacker Visibility.
  • Integration with existing technologies like SIEM to 360 overviews of malware.

Cons

  • Granularity in reporting is missing.

Most Important Features

  • Rapid7 InsightIDR is a solution with a combination of Honeypot Threat intelligence & threat mitigations into one.
  • Manual remediation as well as an automatic response based on the severity and actual damage that occurred.

Return on Investment

  • Deploy easily in entire network. smooth deployment along with best ROI.

Alternatives Considered

Forescout Continuum

Great SIEM

Incentivized
Chris GoodhueView profile
Network Security Specialist in Information Technology at BISSELL Homecare, Inc. (1001-5000 employees employees)

Use Cases and Deployment Scope

Product has been our primary SIEM tools to collect logs and develop alerting around behaviors in our environment. We monitor network,cloud logins and firewall traffic with this tool. Along with MS log data. This has been a great one pane of glass tool to see all logs.

Pros

  • Easy to inject logs
  • Lots of useful information
  • Lots of connections with out products

Cons

  • Can be difficult to query logs
  • UI can be overwhelming
  • Sometimes it’s hard to see data of an alert

Most Important Features

  • MDR support
  • Support for many different products
  • Great customer service

Return on Investment

  • Helps resolve risks
  • MDR support helps time
  • Monitor tool

Alternatives Considered

Splunk Log Observer

Other Software Used

Trend Micro Vision One, Rapid7 InsightVM, KnowBe4 Security Awareness Training