We performed a comparison between Google Chronicle Suite and Rapid7 InsightIDR based on real PeerSpot user reviews.
Find out in this report how the two Security Information and Event Management (SIEM) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The product's most valuable feature is threat hunting. We can detect the threats directly from the console from the past data as well."
"What sets Chronicle apart from other solutions is its emphasis on threat hunting rather than solely serving as a monitoring tool."
"Google Chronicle Suite is a highly scalable solution with good search capabilities."
"Google Chronicle Suite provides useful APIs."
"The support team is responsive."
"The tool's most valuable feature is the search option, allowing easy navigation."
"The log folder is fairly simple."
"The platform's most valuable features are multiple connectors and data output flexibility regarding dashboards and user experience."
"Features for user behavior analytics and the rules for attack review are good."
"Intelligent alerting to avoid the common problem of alert fatigue associated with traditional SIEMs."
"The solution is easy to use, and the interface is intuitive."
"The ability to ingest Office 365 log files, then process them into events and display them on a map."
"Enables the use of honey pots, honey users, and honey files to monitor for suspicious patterns."
"Another very important part of insightIDR is the ability to collect data from endpoint devices via agent software. With a large remote workforce, this allows visibility into the endpoints that are connected to the internet, but not to the corporate network."
"Integration with threat modeling from the Metasploit and InsightIDR repositories."
"The alerting to drive investigations and remediation has been its most valuable feature."
"The tool is complicated for a first-time user. It should also include newer APIs."
"The tool is a little bit difficult to use compared to Microsoft Sentinel."
"The solution's graphical user interface (GUI) should be more user-friendly."
"The tool needs to improve tasking packages. Its GUI needs to be improved. The product needs to include time-based filtration. We can only see the alert detection timeline now."
"The configuration is not optimal."
"In terms of improvement, the UI can be a bit challenging for beginners."
"A few areas are difficult to understand for someone who has less experience using the product."
"The product's default dashboard feature has a few limitations regarding availability."
"Lacks a mobile application."
"The ability to tune the collector for custom logs would greatly help."
"Needs a better ability to customize the check within the console."
"Sometimes, it is hard to get the right queries to use. Currently, the tool lacks a pre-made set of queries."
"They should add more configuration and security features to it."
"I would like to see more development in InsightIDR towards building their SIEM solution and converting it to XDR."
"The interface for doing investigation needs to be enhanced with minor improvements that would make it more useful."
"The dashboard is an area that could be simplified."
Google Chronicle Suite is ranked 28th in Security Information and Event Management (SIEM) with 8 reviews while Rapid7 InsightIDR is ranked 10th in Security Information and Event Management (SIEM) with 30 reviews. Google Chronicle Suite is rated 7.8, while Rapid7 InsightIDR is rated 8.4. The top reviewer of Google Chronicle Suite writes "Swiftly navigates and analyzes extensive datasets without significant delays ". On the other hand, the top reviewer of Rapid7 InsightIDR writes "Helps in the management of compliance, secret events and information". Google Chronicle Suite is most compared with Splunk Enterprise Security, Microsoft Sentinel, AWS Security Hub, Sentinel and Sumo Logic Security, whereas Rapid7 InsightIDR is most compared with Darktrace, Microsoft Sentinel, Splunk Enterprise Security, Rapid7 InsightVM and Tanium. See our Google Chronicle Suite vs. Rapid7 InsightIDR report.
See our list of best Security Information and Event Management (SIEM) vendors.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.