Microsoft ATA [EOL] vs Rapid7 InsightIDR comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Microsoft ATA [EOL] and Rapid7 InsightIDR based on real PeerSpot user reviews.

Find out what your peers are saying about IBM, Splunk, Cynet and others in User Entity Behavior Analytics - UEBA.
To learn more, read our detailed User Entity Behavior Analytics - UEBA Report (Updated: March 2024).
765,234 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The stability of the solution is very good.""One of the most valuable features is the ability to report on questionable activity.""The solution works well when used with other Microsoft solutions."

More Microsoft ATA [EOL] Pros →

"Simple configuration and automatically syncs to the cloud platform.""​​User behavioral analytics allows us to pinpoint abnormal or suspicious behavior among millions of events every day.""The UI is very good.""Integration with threat modeling from the Metasploit and InsightIDR repositories.""The solution is very scalable in terms of the licensing model.""The technical support is a solid 10 out of 10 as they take the time to answer any questions or problems which may arise in a reasonable time frame.""The biggest reason why we chose Rapid7 was to gain value in a really quick time. Its deployment doesn't take months. It just takes a few days.""Log search allows us to dive deep into aggregated logs and query all event types at once.​"

More Rapid7 InsightIDR Pros →

Cons
"There are occasions where it generates some false positives and you have to embark into figuring it out. You need to find out if it was a true alert or a false positive. It's a little bit cumbersome in that area.""Some of the newer features are not completely there yet... For example, there's a tool that allows you to grade your overall internal security and I don't feel that it's completely accurate.""It would be ideal if the interface allowed for more granular configurations. For example, if I were to set a rule that is a deviation from the pre-defined rules in the Microsoft product, there's conflict."

More Microsoft ATA [EOL] Cons →

"The product allows us to make only 30 custom rules.""The interface for doing investigation needs to be enhanced with minor improvements that would make it more useful.""The integration capabilities of the solution have certain shortcomings where improvements are required.""Needs a better ability to customize the check within the console.""The ability to tune the collector for custom logs would greatly help.""I would like the ability to adjust the threshold of certain existing alerts. Currently the only option is to change the notifications or create my own alert.""They should add more configuration and security features to it.""Tenable Nessus is easier to deal with. It's more efficient and accurate. InsightIDR is heavier than Tenable in terms of performance and scanning. Rapid7 would be much easier to use if it had a network connector like Tenable. Tenable's connector allows continuous monitoring over the B caps."

More Rapid7 InsightIDR Cons →

Pricing and Cost Advice
  • "I believe we are looking into new licenses. They may be called the E5. Honestly, I don't have it on top of my mind, but I think it's around seven to $10 a user per month."
  • More Microsoft ATA [EOL] Pricing and Cost Advice →

  • "​I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability.​"
  • "The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help.​"
  • "Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."
  • "​Accurately predict your licensing counts as this is a subscription based product.​"
  • "The pricing and licensing are competitive."
  • "Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."
  • "It is a reasonably priced solution."
  • "It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."
  • More Rapid7 InsightIDR Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which User Entity Behavior Analytics - UEBA solutions are best for your needs.
    765,234 professionals have used our research since 2012.
    Questions from the Community
    Ask a question

    Earn 20 points

    Top Answer:For tools I’d recommend:  -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also,… more »
    Top Answer:During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an application… more »
    Top Answer:We chose Rapid7 because of its price. IBM QRadar charges us based on data storage. Rapid7 InsightIDR charges us based on the endpoints we connect to. We are satisfied with the product’s price.
    Ranking
    Unranked
    In User Entity Behavior Analytics - UEBA
    Views
    1,906
    Comparisons
    998
    Reviews
    8
    Average Words per Review
    332
    Rating
    8.3
    Comparisons
    Also Known As
    Microsoft Advanced Threat Analytics, MS ATA [EOL]
    InsightIDR
    Learn More
    Overview
    Microsoft Advanced Threat Analytics (ATA) provides a simple and fast way to understand what is happening within your network by identifying suspicious user and device activity with built-in intelligence and providing clear and relevant threat information on a simple attack timeline. Microsoft ATA is an on-premises platform to help you protect your enterprise from advanced targeted attacks by automatically analyzing, learning, and identifying normal and abnormal entity (user, devices, and resources) behavior. It detects suspicious activities and malicious attacks with behavioral analytics, adapts to the changing nature of cyber-security threats, focuses on what is important with a simple attack timeline and reduces false positive fatigue.

    Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

    Sample Customers
    Turkish Airlines, Seoul National University Bundang Hospital, Empa, The Alberta Teachers' Association
    Liberty Wines, Pioneer Telephone, Visier
    Top Industries
    No Data Available
    REVIEWERS
    Comms Service Provider21%
    Computer Software Company21%
    Non Tech Company14%
    Security Firm14%
    VISITORS READING REVIEWS
    Computer Software Company15%
    Manufacturing Company8%
    Financial Services Firm8%
    Government6%
    Company Size
    No Data Available
    REVIEWERS
    Small Business61%
    Midsize Enterprise21%
    Large Enterprise18%
    VISITORS READING REVIEWS
    Small Business26%
    Midsize Enterprise20%
    Large Enterprise54%
    Buyer's Guide
    User Entity Behavior Analytics - UEBA
    March 2024
    Find out what your peers are saying about IBM, Splunk, Cynet and others in User Entity Behavior Analytics - UEBA. Updated: March 2024.
    765,234 professionals have used our research since 2012.

    Microsoft ATA [EOL] doesn't meet the minimum requirements to be ranked in User Entity Behavior Analytics - UEBA while Rapid7 InsightIDR is ranked 5th in User Entity Behavior Analytics - UEBA with 29 reviews. Microsoft ATA [EOL] is rated 6.6, while Rapid7 InsightIDR is rated 8.4. The top reviewer of Microsoft ATA [EOL] writes "Easy to define rules but interface needs better granularity and only integrates well with other Microsoft solutions". On the other hand, the top reviewer of Rapid7 InsightIDR writes "An affordable product that is easy to use and has many advanced features and default templates". Microsoft ATA [EOL] is most compared with , whereas Rapid7 InsightIDR is most compared with Darktrace, Microsoft Sentinel, Splunk Enterprise Security, Rapid7 InsightVM and IBM Security QRadar.

    See our list of best User Entity Behavior Analytics - UEBA vendors.

    We monitor all User Entity Behavior Analytics - UEBA reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.