Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Robust monitoring for any situation
What do you like best about the product?
Insight IDR provides a detailed look at any event that might occur in your environment. It's flexible enough to plug into just about any situation and has the ability to monitor a number of 3rd party sources giving you a single view into your entire environment without having to go to multiple dashboards.
What do you dislike about the product?
There can be a lot of overhead and some of the integrations and monitoring especially for Windows devices can be a little clunky. Additional collector servers will be needed to gather the logs and these can be costly if you're running them in the cloud.
What problems is the product solving and how is that benefiting you?
Insight IDR provides us with the security tools we need to monitor and respond to events in our environment. Each alert includes a detailed reasoning for why it was generated in addition to remediation steps. It makes it easy to resolve issues and gives you the peace of mind knowing that everything is being monitored around the clock.
- Leave a Comment |
- Mark review as helpful
Very facinating experience
What do you like best about the product?
Very Easy for usage and implementation. Good Customer support.
What do you dislike about the product?
Nothing to describe much as it is user friendly.
What problems is the product solving and how is that benefiting you?
Security related problems
Excellent soc tools to have analysis
What do you like best about the product?
Its have features of integrated with active directory to check user details in detailed
It's very easy to approach
It's very easy to approach
What do you dislike about the product?
No option to export daily alerts
It's should be very recommended for organisation to help for their approach of business possibilities
It's should be very recommended for organisation to help for their approach of business possibilities
What problems is the product solving and how is that benefiting you?
It's user for deep analysis of any incident with approach of log analysis and detailed investigation
It's depends on the approach of user
It's depends on the approach of user
InsightIDR is a highly effective and user-friendly cybersecurity solution.
What do you like best about the product?
The visibility and threat detection that InsightIDR offers for our organization's network is vital, making it a crucial component of our defence against cyberattacks. It is also very easy to use.
What do you dislike about the product?
Pricing: Although InsightIDR offers outstanding value for the services it delivers, smaller organisations with tighter budgets could discover its pricing to be on the expensive side.
What problems is the product solving and how is that benefiting you?
Cybersecurity-related issues are being addressed by InsightIDR, and the advantages it provides to organisations using it are significant. Here are some of the main issues that InsightIDR resolves and how those advantages might help your company:
Detecting threats in real time is where InsightIDR really shines. It recognises and notifies you of questionable actions, unauthorised access tries, and potential security breaches as they take place. With this skill, you can react quickly, reducing the potential harm and data loss brought on by cyberattacks.
Detecting threats in real time is where InsightIDR really shines. It recognises and notifies you of questionable actions, unauthorised access tries, and potential security breaches as they take place. With this skill, you can react quickly, reducing the potential harm and data loss brought on by cyberattacks.
Awesome Power!
What do you like best about the product?
Prompt, easy to parse alerts on the relevant assets it monitors that allows for a measured and swift response.
What do you dislike about the product?
That every contract I'm on doesn't use it. I am a big fan of the Rapid7 product as a Cybersecurity professional. I think this is the best on the market in the detection and response space.
What problems is the product solving and how is that benefiting you?
Every deployment I've been fortunate enough to to work on the administrator side of the operation is saving TIME and headache. So in terms of labor and my team's sanity = paying dividends.
Rapid 7 IDR
What do you like best about the product?
We are now monitoring all logs from various security solutions sent to IDR and it helps our operations in correlating all these findings easily. Saves time in logging in to different UI and we now have a single console of correlation and source of alerts and notifications
What do you dislike about the product?
NOt all solutions can be integrated outside the box. We need to learn all parsings and eliminate all false positives. It takes time for the solution to learn network traffic
What problems is the product solving and how is that benefiting you?
We bought primarily for SIEM purpose and it is benefiting the company in terms of saving time for analyst to go over all solutions for every shift. It has a descent XDR features although we haven't maximized it yet.
Easy to install and manage
What do you like best about the product?
The installation process is very simple, making it easy to control and manage monitored endpoints.
What do you dislike about the product?
I have no negative points about the product
What problems is the product solving and how is that benefiting you?
Ease of management and greater visibility of processes and executions in the monitored environment
Incredible Software!
What do you like best about the product?
I love how easy it is to navigate and find what I need while at the same time being feature-rich with great depth. InsightIDR is my single pane of glass for all my security needs.
What do you dislike about the product?
There's a steep learning curve to get the most out of InsightIDR. It took me quite a while to get acclimated to the workflow but our organization is on the other of that now.
What problems is the product solving and how is that benefiting you?
We now have visibility into areas of our organization that we didn't have a clear line of sight into before. It's been great! Our level of security actioning has gone up a ton!
Detection Rule in Attack Behavior & User Behavior Insight are great for Incident Response Management
What do you like best about the product?
InsightIDR provides dependable incident detection so that we don't get misled with false security alerts in our platform. It offers various Insight Agents which is responsible for reliable endpoint threat detection quick. It effectively captures confidential data and includes relevant context to our alerts so that we obtain excellent visibility for all our security incidents.
What do you dislike about the product?
It effectively eliminates the need for parsing through our endpoint logs to track the issues & security breaches. It gives sophisticated Enhanced Endpoint Telemetry which offers a detailed history of archives from the moment its start activity on the endpoint is initiated. Overall, InsightIDR is suitable to manage our security incidents through its organized detection libraries and excellent user experience.
What problems is the product solving and how is that benefiting you?
We integrate our AWS CloudTrail with InsightIDR to obtain SaaS-based SIEM & XDR solutions for our internal and external attack detections. It delivers superb detection rules to explore various Attacker Behaviour Analytics, User Behaviour Analytics &Alert Modifications. It enables us to work more efficiently through its built-in automation capabilities & avoiding distractions by providing clear network traffic analysis.
Useful out of the box detection capabilities, some limitations
What do you like best about the product?
InsightIDR is easy to provision (SaaS plus an on-prem collector) and comes with a good mix of features and alerts configured by default. Setup is easy for different event sources, including AD, LDAP, DNS, endpoint agents, and some SaaS applications.
What do you dislike about the product?
The reporting and dashboards are a bit limited. It would be great if the dashboards had better drill-down functionality similar to what you can find in other SIEM / UEBA products. Some of the menu pop-out functionality is a bit clunky when limiting dashboards and reports to only include data from specific event sources. There is a learning curve associated with building new dashboards. The most useful of which require familiarity with Rapid7's proprietary query language.
What problems is the product solving and how is that benefiting you?
InsightIDR helps us to correlate logs across multiple event sources and multiple organizations. We use the product to detect anomalous activity and to investigate security incidents. We have also used the product to detect and thwart active password guessing attacks leveraged against cloud services. We expect the system to bring even more value as we deploy more functions - such as their network sensor (IDS) and deception technologies.
Recommendations to others considering the product:
Identify what you want to monitor, and develop a rollout plan. Expect that you may have to deploy at least one collector per monitored domain, as collectors may fail to collect events across domains, even if those domains are trusted by the domain hosting the collector and its associated monitoring user account. Before deploying, you may also wish to ensure that the product can integrate adequately will all of your in-scope SaaS applications via API.
showing 1 - 10