Palo Alto Networks AutoFocus vs Rapid7 InsightIDR comparison

Cancel
You must select at least 2 products to compare!
Palo Alto Networks Logo
1,160 views|396 comparisons
83% willing to recommend
Rapid7 Logo
6,748 views|3,628 comparisons
95% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Palo Alto Networks AutoFocus and Rapid7 InsightIDR based on real PeerSpot user reviews.

Find out what your peers are saying about Recorded Future, Check Point Software Technologies, Microsoft and others in Threat Intelligence Platforms.
To learn more, read our detailed Threat Intelligence Platforms Report (Updated: April 2024).
768,740 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The logs play a crucial role as they contribute to blocking unwanted Internet traffic.""The feature that I like best is the dashboard.""It integrates well with other solutions and provides good threat intelligence in terms of external threats.""The most valuable feature is alerting.""I am impressed with the tool's integration of Palo Alto products which serves as a platform for security."

More Palo Alto Networks AutoFocus Pros →

"Rapid7's reporting is more robust than Tenable's.""The solution is very stable and works very well for what I need it to do.""The log aggregation and storage provided by InsightIDR has shown no issues with scalability; aggregating over one hundred millions events daily.""Great coverage of all systems within our network from endpoint to firewall.""The biggest reason why we chose Rapid7 was to gain value in a really quick time. Its deployment doesn't take months. It just takes a few days.""The alerting to drive investigations and remediation has been its most valuable feature.​""InsightIDR helps us investigate an environment to discover information about incidents.""InsightIDR has allowed us to find potential security issues that we did not know existed, and get remediation quickly."

More Rapid7 InsightIDR Pros →

Cons
"I would like the tool to see more integration with Cortex XDR. There is no real reason to keep them separate.""It would be helpful to have better documentation for configuring and installing the solution.""It is a completely cloud-based product at present.""It would be better if they used the threat intelligence feeds directly from their side and changing the verdict instead of us requesting it.""I would like to have more technical documentation that contains greater detail on the types of threats that are occurring."

More Palo Alto Networks AutoFocus Cons →

"Currently, it lacks the functionalities provided by Rapid7's User Behavior Analytics (UBA).""The APIs can be further improved in Rapid7.""Needs a better ability to customize the check within the console.""The dashboard is an area that could be simplified.""I would like the ability to adjust the threshold of certain existing alerts. Currently the only option is to change the notifications or create my own alert.""Cloud risk assessment is one area where I think they need a lot of improvement.""Rapid7 doesn't integrate well with all our security tools from various vendors, so we plan to switch. Many of our solutions work with Rapid7, but some do not. We are already searching for a replacement already.""The main problem lies in the processes within the client's operating systems."

More Rapid7 InsightIDR Cons →

Pricing and Cost Advice
  • "It is expensive."
  • "The solution is reasonably priced."
  • More Palo Alto Networks AutoFocus Pricing and Cost Advice →

  • "​I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability.​"
  • "The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help.​"
  • "Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."
  • "​Accurately predict your licensing counts as this is a subscription based product.​"
  • "The pricing and licensing are competitive."
  • "Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."
  • "It is a reasonably priced solution."
  • "It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."
  • More Rapid7 InsightIDR Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Threat Intelligence Platforms solutions are best for your needs.
    768,740 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:I am impressed with the tool's integration of Palo Alto products which serves as a platform for security.
    Top Answer:I would like the tool to see more integration with Cortex XDR. There is no real reason to keep them separate.
    Top Answer:The tool along with other suite of products provides us with threat and alert information.
    Top Answer:For tools I’d recommend:  -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also,… more »
    Top Answer:During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an application… more »
    Top Answer:We chose Rapid7 because of its price. IBM QRadar charges us based on data storage. Rapid7 InsightIDR charges us based on the endpoints we connect to. We are satisfied with the product’s price.
    Ranking
    Views
    1,160
    Comparisons
    396
    Reviews
    2
    Average Words per Review
    354
    Rating
    7.5
    Views
    6,748
    Comparisons
    3,628
    Reviews
    10
    Average Words per Review
    415
    Rating
    8.2
    Comparisons
    Also Known As
    InsightIDR
    Learn More
    Overview

    AutoFocus contextual threat intelligence service accelerates analysis, correlation and prevention workflows. Unique, targeted attacks are automatically prioritized with full context, allowing security teams to respond to critical attacks faster, without additional IT security resources.

    Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

    Sample Customers
    Telkom Indonesia
    Liberty Wines, Pioneer Telephone, Visier
    Top Industries
    VISITORS READING REVIEWS
    Financial Services Firm16%
    Computer Software Company11%
    Manufacturing Company10%
    Government9%
    REVIEWERS
    Comms Service Provider21%
    Computer Software Company21%
    Non Tech Company14%
    Security Firm14%
    VISITORS READING REVIEWS
    Computer Software Company15%
    Manufacturing Company8%
    Financial Services Firm8%
    Government6%
    Company Size
    REVIEWERS
    Small Business29%
    Midsize Enterprise14%
    Large Enterprise57%
    VISITORS READING REVIEWS
    Small Business23%
    Midsize Enterprise10%
    Large Enterprise68%
    REVIEWERS
    Small Business61%
    Midsize Enterprise21%
    Large Enterprise18%
    VISITORS READING REVIEWS
    Small Business26%
    Midsize Enterprise20%
    Large Enterprise54%
    Buyer's Guide
    Threat Intelligence Platforms
    April 2024
    Find out what your peers are saying about Recorded Future, Check Point Software Technologies, Microsoft and others in Threat Intelligence Platforms. Updated: April 2024.
    768,740 professionals have used our research since 2012.

    Palo Alto Networks AutoFocus is ranked 9th in Threat Intelligence Platforms with 5 reviews while Rapid7 InsightIDR is ranked 10th in Security Information and Event Management (SIEM) with 29 reviews. Palo Alto Networks AutoFocus is rated 7.8, while Rapid7 InsightIDR is rated 8.4. The top reviewer of Palo Alto Networks AutoFocus writes "Impressive performance and monitoring capabilities but lacks in documentation". On the other hand, the top reviewer of Rapid7 InsightIDR writes "An affordable product that is easy to use and has many advanced features and default templates". Palo Alto Networks AutoFocus is most compared with ThreatConnect Threat Intelligence Platform (TIP), Anomali ThreatStream, VirusTotal, LogRhythm SIEM and Cisco Threat Grid, whereas Rapid7 InsightIDR is most compared with Darktrace, Microsoft Sentinel, Splunk Enterprise Security, Rapid7 InsightVM and IBM Security QRadar.

    We monitor all Threat Intelligence Platforms reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.