We provide InsightIDR for our banking and ICT clients.
Rapid7 Command Platform
Rapid7External reviews
82 reviews
from
and
External reviews are not included in the AWS star rating for the product.
It provides excellent visibility a fast response
What is our primary use case?
What is most valuable?
InsightIDR helps us investigate an environment to discover information about incidents.
What needs improvement?
InsightIDR's integration with other solutions could be improved. Also, I'd like more control from the portal over what's happening on the endpoint side. For example, when I see an attack on an endpoint, I want to be able to stop it from the portal.
For how long have I used the solution?
I have used InsightIDR for four years.
What do I think about the stability of the solution?
I rate InsightIDR 10 out of 10 for stability.
What do I think about the scalability of the solution?
I rate InsightIDR six out of 10 for scalability. The licensing model limits the scalability. The licenses are defined based on assets, so you have to purchase more licenses as you add assets. It's suitable for a small or medium-sized company. We have about 250 users.
How are customer service and support?
I rate Rapid7 support nine out of 10.
How would you rate customer service and support?
Positive
How was the initial setup?
I rate InsightIDR eight out of 10 for ease of setup. It takes about seven working days to deploy. We install a connector on the LAN, which links up to the cloud and becomes one of your event sources. Next, you need to integrate everything with the console.
What's my experience with pricing, setup cost, and licensing?
I rate InsightIDR six out of 10 for affordability. It isn't the cheapest solution I've seen, but it offers a greater value than less expensive competitors.
What other advice do I have?
I rate InsightIDR eight out of 10. It's worth a try. InsightIDR provides excellent visibility and threats. The network detection is fast, so you get alerts as soon as something happens.
Great user behavior analytics feature; easy to integrate and collect data from other solutions
What is our primary use case?
We are distributors and sell this product to our customers. I'm a security consultant.
What is most valuable?
The features for user behavior analytics and the rules for attack review are valuable. I also like the honeypot feature. It's easy to integrate and collect data from other solutions.
What needs improvement?
I'd like to see a better ability to customize the check within the console. Rules can be customized better if the integration is improved. They now have integration with CrowdStrike so maybe they could have some kind of integration with Microsoft.
For how long have I used the solution?
I've been using this solution for a year.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
This is a cloud-based product so it's scalable.
How are customer service and support?
The technical support could be improved. We've had times when our requests get stuck with the engineering team and we sometimes don't get a response. That's a problem for us.
How would you rate customer service and support?
Neutral
How was the initial setup?
All Rapid7 solutions are easy to deploy because if you have any one of the products, the integrations between these products become easier because they have a lot of the important things within a single port. You get a single platform to visualize a lot of different kinds of data.
What's my experience with pricing, setup cost, and licensing?
The pricing is very competitive because the licensing model that we use is based on endpoints which is different from most other solutions.
What other advice do I have?
This solution is suited to all sizes of organizations. We generally deal with small and medium-sized companies.
I rate this solution eight out of 10.
An easy-to-use and stable solution with an intuitive interface
What is our primary use case?
I use the solution for its SIEM functionalities, log analysis, and behavioral analysis.
What is most valuable?
The solution is easy to use, and the interface is intuitive.
What needs improvement?
Currently, it lacks the functionalities provided by Rapid7's User Behavior Analytics (UBA). So, User Behavior Analytics (UBA) should be added in the new release.
For how long have I used the solution?
I have been using the solution for two years. My company has a partnership with Rapid7.
What do I think about the stability of the solution?
It is a stable solution. My customers are happy to use it.
What do I think about the scalability of the solution?
I do not have any plans to expand the usage of the solution. Currently, one hundred people are using the solution.
How are customer service and support?
I have not used the technical support.
Which solution did I use previously and why did I switch?
Previously, I used IBM.
How was the initial setup?
I was not involved in the initial setup as I am not an engineer.
What's my experience with pricing, setup cost, and licensing?
The pricing is good, and it is not very expensive.
What other advice do I have?
I rate the overall solution a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Detection Rule in Attack Behavior & User Behavior Insight are great for Incident Response Management
What do you like best about the product?
InsightIDR provides dependable incident detection so that we don't get misled with false security alerts in our platform. It offers various Insight Agents which is responsible for reliable endpoint threat detection quick. It effectively captures confidential data and includes relevant context to our alerts so that we obtain excellent visibility for all our security incidents.
What do you dislike about the product?
It effectively eliminates the need for parsing through our endpoint logs to track the issues & security breaches. It gives sophisticated Enhanced Endpoint Telemetry which offers a detailed history of archives from the moment its start activity on the endpoint is initiated. Overall, InsightIDR is suitable to manage our security incidents through its organized detection libraries and excellent user experience.
What problems is the product solving and how is that benefiting you?
We integrate our AWS CloudTrail with InsightIDR to obtain SaaS-based SIEM & XDR solutions for our internal and external attack detections. It delivers superb detection rules to explore various Attacker Behaviour Analytics, User Behaviour Analytics &Alert Modifications. It enables us to work more efficiently through its built-in automation capabilities & avoiding distractions by providing clear network traffic analysis.
InsightIDR
What do you like best about the product?
Intelligence and ease of use. Increased productivity.
What do you dislike about the product?
Ramp up time. Took too long to get the value out of it.
What problems is the product solving and how is that benefiting you?
Correlation of events. Once ramped up, increases day to day productivity.
Overall I found InsightIDR to be an excellent products
What do you like best about the product?
Security management program for organization
What do you dislike about the product?
Nothing special as I learned most of things
What problems is the product solving and how is that benefiting you?
For regular issues
Recommendations to others considering the product:
Best place
InsightIDR- Best Cloud SIEM tool
What do you like best about the product?
The Best part of InSightidr, which I like is Attack Behaviour Analytics feature. It help me to analysis what kind of attack has been happening or what type of attack attacker has been performing in my product. Another Feature that is Network Traffic Analysis help me to understand from where traffic is coming from and at which time my system observe load.
What do you dislike about the product?
While using Insightidr still now, I didn't find any dislike in this tool. I will update if I found any dislike.
What problems is the product solving and how is that benefiting you?
InSightIDR helps to understand what type of attacks has been happening on my server, and traffic analysis allows me to be upscale and downscale my server capacity.
Recommendations to others considering the product:
I would recommend InsightIDR for those who are very keen regarding attack happening in server and traffic analysis
Incident response
What do you like best about the product?
The thorough incident detection that it picks up
What do you dislike about the product?
I thought the tool was awesome and simple to use. The only thing I disliked was the lack of training for it. However, it is very user-friendly.
What problems is the product solving and how is that benefiting you?
What suspicious activity is common and how we can prevent dangerous IPs from contacting our system.
Wonderful Tool InsightIDR
What do you like best about the product?
Asset Inventory tracking, Anomaly detection using artificial intelligence,
What do you dislike about the product?
Become slow when the volume of data increases
What problems is the product solving and how is that benefiting you?
Security Incident and Event Management (SIEM Solution), Advance dashboard to create KPI
Recommendations to others considering the product:
It is one of the best SIEM tool in the market, It works best if you have the other tool integrated from Rapid 7 family. need some improvement in Elasticity search, but the overall experience is pleasing, especially its advanced dashboard.
Its quite interactive, quick-easy integration and easy handling!
What do you like best about the product?
Great visibility for threat incident response, I was moved with its feature on analysing the user and attackers behaviour leading to automated solutions.
What do you dislike about the product?
Overall functionality is great but enhancing new features would require extra cost for licensing.
What problems is the product solving and how is that benefiting you?
Fantastic replacement or my SIEM solution and providing me with a real insight into threat analysis in my client environment.
showing 11 - 20