We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
"The feature that I like best is the dashboard."
"The most valuable feature is alerting."
"It integrates well with other solutions and provides good threat intelligence in terms of external threats."
"The web interface is great — very useful and user-friendly."
"If you were on other solutions, you would notice that they use agents from third-party, from open-source, from a native OS, or from other tools. Here, however, it is an agent from Rapid7 itself. This adds to the solution's overall capabilities."
"It is a very stable solution."
"Very intuitive and easy to set up."
"Simple configuration and automatically syncs to the cloud platform."
"Rapid7 InsightIDR integrates well with other solutions. It's also easy to configure because Rapid7 InsightIDR has a lot of instructions posted on their website that customers can follow if they need to get the source log."
"I would like to have more technical documentation that contains greater detail on the types of threats that are occurring."
"It would be better if they used the threat intelligence feeds directly from their side and changing the verdict instead of us requesting it."
"It is a completely cloud-based product at present."
"The interface for doing investigation needs to be enhanced with minor improvements that would make it more useful."
"Cloud risk assessment is one area where I think they need a lot of improvement."
"The dashboard is an area that could be simplified."
"Lacks a mobile application."
"Inability to get access to compliance reports within the solution."
"InsightIDR is only available in a cloud version. Some of our customers prefer an on-prem solution because they want to manage the security within their environment."
"It is a reasonably priced solution."
AutoFocus contextual threat intelligence service accelerates analysis, correlation and prevention workflows. Unique, targeted attacks are automatically prioritized with full context, allowing security teams to respond to critical attacks faster, without additional IT security resources.
Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.
Palo Alto Networks AutoFocus is ranked 12th in Threat Intelligence Platforms with 3 reviews while Rapid7 InsightIDR is ranked 10th in Security Information and Event Management (SIEM) with 6 reviews. Palo Alto Networks AutoFocus is rated 8.0, while Rapid7 InsightIDR is rated 8.2. The top reviewer of Palo Alto Networks AutoFocus writes "Identifies critical attacks, easy to use, stable, and integrates well ". On the other hand, the top reviewer of Rapid7 InsightIDR writes "Easy to use with a simple setup and good scalability". Palo Alto Networks AutoFocus is most compared with Cisco Threat Grid, LogRhythm NextGen SIEM, Trend Micro Deep Discovery, Recorded Future and ThreatConnect Threat Intelligence Platform (TIP), whereas Rapid7 InsightIDR is most compared with Darktrace, Splunk, Azure Sentinel, IBM QRadar and AT&T AlienVault USM.
We monitor all Threat Intelligence Platforms reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.