Rapid7 InsightIDR is a cloud-based SIEM built for security teams in need of a solution that can quickly detect and respond to threats in today's ever-evolving hybrid and multi-cloud IT environments.

InsightIDR deploys quickly. Customers routinely get up and running in under a day. A library of 900+ out of the box detections lets InsightIDR start detecting threats as soon as deployment is complete.

Once deployed, InsightIDR monitors your entire IT environment. It can ingest CloudTrail, GuardDuty, EC2 network traffic, and raw logs sent via SQS from multiple AWS accounts plus data from other cloud services, on-premises networks, and remote endpoints. From there, you can use InsightIDR to:

• Visualize and search all your security data in a single intuitive interface
• Quickly detect threats and minimize false alarms with user and attacker behavior analytics, backed by a vast community of threat intel
• Build layered defenses with honeypots, honey credentials, and honey files
• Detect use of new AWS regions, services, and EC2 instance types
• Cut investigation times with detailed log timelines and automated response workflows
• Meet log, event, and File Integrity Monitoring (FIM) requirements of compliance frameworks like PCI, HIPAA, and GDPR

InsightIDR is also available as a managed service.

NOTE: InsightIDR's attribution engine requires access to Microsoft Active Directory, DHCP, and LDAP. Before purchasing, please read documentation and contact Rapid7 with any questions.