AlienVault OSSIM vs Rapid7 InsightIDR comparison

AT&T and Rapid7 are both solutions in the Security Information and Event Management (SIEM) category. AT&T is ranked #11 with an average rating of 7.3, while Rapid7 is ranked #9 with an average rating of 8.1. AT&T holds a 5.0% mindshare in SIEM, compared to Rapid7’s 2.6% mindshare. Additionally, 80% of AT&T users are willing to recommend the solution, compared to 95% of Rapid7 users who would recommend it.

AlienVault OSSIM

Read 30 AlienVault OSSIM reviews

6,061 Views
3,812 Comparison Views

80% willing to recommend

Rapid7 InsightIDR

Read 31 Rapid7 InsightIDR reviews

5,093 Views
2,897 Comparison Views

95% willing to recommend

AlienVault OSSIM

Rapid7 InsightIDR

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Rapid7 InsightIDR and AlienVault OSSIM are both popular security information and event management tools. Rapid7 InsightIDR is favored for its intuitive design and robust incident detection capabilities. AlienVault OSSIM offers extensive features appreciated by more technical users and may be considered superior for those seeking comprehensive functionality.

Features: Rapid7 InsightIDR provides advanced threat detection, user behavior analytics, and automation features. AlienVault OSSIM offers open-source flexibility, rich integration options, and extensive network visibility. While both have strong feature sets, AlienVault OSSIM's customizable nature and broader integration potential give it an edge for users needing extensive control over their security environment.

Room for Improvement: Users of Rapid7 InsightIDR highlight the need for more customizable reporting, enhanced integration capabilities, and better system performance. AlienVault OSSIM users point out that the product could benefit from a more streamlined update process, improved system performance, and easier deployment. Both products have areas for refinement, but AlienVault OSSIM's enhancement opportunities are more pronounced in its performance and maintenance aspects.

Ease of Deployment and Customer Service: Rapid7 InsightIDR is praised for its straightforward deployment process and responsive support team. AlienVault OSSIM users note the product's deployment complexity and slower customer service response times. Rapid7 InsightIDR offers a smoother and more efficient deployment experience, coupled with better customer support.

Pricing and ROI: Rapid7 InsightIDR users find the pricing justified by the product's capabilities and ROI. AlienVault OSSIM is appreciated for its cost-effective, open-source model, although some users note a steeper learning curve impacting ROI. Rapid7 InsightIDR delivers a balanced cost and benefit experience, while AlienVault OSSIM's pricing advantage is tempered by higher resource investments.

To learn more, read our detailed AlienVault OSSIM vs. Rapid7 InsightIDR Report (Updated: December 2024).

Buyer's Guide

AlienVault OSSIM vs. Rapid7 InsightIDR

December 2024

Download the complete report

Helped 824,053 peers since 2012

Categories and Ranking

AlienVault OSSIM

Ranking in Security Information and Event Management (SIEM)

11th

Average Rating

7.4

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

No ranking in other categories

Rapid7 InsightIDR

Ranking in Security Information and Event Management (SIEM)

9th

Average Rating

8.4

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (3rd), Endpoint Detection and Response (EDR) (20th), Threat Deception Platforms (5th), Extended Detection and Response (XDR) (15th)

Mindshare comparison

As of December 2024, in the Security Information and Event Management (SIEM) category, the mindshare of AlienVault OSSIM is 5.0%, up from 3.0% compared to the previous year. The mindshare of Rapid7 InsightIDR is 2.6%, down from 2.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

HarshBhardiya

SOC Engineer at Just Dial Limited

An open-source solution that provide good detection and more visibility

The solution is not scalable. It impacts so hard. In the initial stages, AlienVault OSSIM can be suitable for small environments. There may be limitations if the customer expresses a desire to expand and add more devices. In such cases, we would need to either explore additional solutions or work within the constraints of the existing setup. We have set up alerts and configured everything in AlienVault OSSIM. It actively monitors for any security incidents. It provides us with regular updates and notifications about any ongoing activities. Only one person is using the solution. It is the perfect solution for small businesses. I rate the solution’s scalability a three out of ten.

Read full review

Gerard Konan

Founder & CEO at AGILLY

Helps in the management of compliance, secret events and information

One of our customers had a Huawei firewall and we required help to do the configuration. However, the installation was easy with other standard vendors like Cisco and Check Point. The product's deployment got completed in four to five days and we required three people to handle it. One person was in charge of the portal's initial set up and the other one handled the integration of on-premises devices. The third one took care of Office 365 integration.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Inbuilt IDS, inbuilt integration with threat intelligence platform and with vulnerability assessment modules."

"It has helped us remediate threats in the past by providing significant events that assisted in identifying suspicious activities, such as logins from multiple countries."

"AlienVault OSSIM's GUI is very user-friendly."

"The solution is very stable. Compared to Qradar and Splunk, it's very stable."

"The threat alerts it gives me from time to time on harmful code within the network, or if they are generating any network traffic, are very useful."

"You can customize the dashboards as well as the reporting."

"AlienVault OSSIM is an enterprise solution that sells easily. It is rated highly by organizations."

"The threat policies of the solution are always very advanced and the best in the market. They are very persistent in terms of keeping up with security protocols."

More AlienVault OSSIM pros

"The solution's initial setup is easy."

"Enables the use of honey pots, honey users, and honey files to monitor for suspicious patterns."

"Scalability-wise, I rate the solution a ten out of ten. As a cloud tool, the product is highly scalable."

"The solution is very stable and works very well for what I need it to do."

"Log search allows us to dive deep into aggregated logs and query all event types at once."

"The biggest reason why we chose Rapid7 was to gain value in a really quick time. Its deployment doesn't take months. It just takes a few days."

"InsightIDR has allowed us to find potential security issues that we did not know existed, and get remediation quickly."

"The product works well. Stability-wise, I rate the solution a ten out of ten."

More Rapid7 InsightIDR pros

Cons

"AlienVault OSSIM could improve by having better integration with some of the newer tools."

"AlienVault OSSIM is costly."

"There needs to be more support or some kind of training program so users can self-learn the system more effectively."

"It takes some time. It does not give me a prompt response for any such [malicious] traffic. It takes time to get that alert from the AlienVault system."

"There are somewhat more false positives with the user behavior analytics, which could benefit from an additional machine learning model to detect user patterns more rapidly."

"We need more dashboards and we need more customization for dashboards."

"AlienVault OSSIM should improve the deployment and make it unified like the USM."

"They can add more compliance templates."

More AlienVault OSSIM cons

"Customised alert recipients need to be added to allow better first-line action and quicker response. Configurable honeypots would be a welcome addition."

"Rapid7 doesn't integrate well with all our security tools from various vendors, so we plan to switch. Many of our solutions work with Rapid7, but some do not. We are already searching for a replacement already."

"I would like the ability to adjust the threshold of certain existing alerts. Currently the only option is to change the notifications or create my own alert."

"Currently, it lacks the functionalities provided by Rapid7's User Behavior Analytics (UBA)."

"The integration capabilities of the solution have certain shortcomings where improvements are required."

"It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required."

"Rapid7 InsightIDR is not intuitive to search for logs. It should be more user-friendly and improve the dashboards. We should be able to use ready-made templates instead of having to build one."

"Sometimes, it is hard to get the right queries to use. Currently, the tool lacks a pre-made set of queries."

More Rapid7 InsightIDR cons

Pricing and Cost Advice

"AlienVault OSSIM is expensive compared to its competitors."

"AlienVault OSSIM is free."

"When comparing AlienVault OSSIM to Microsoft Sentinel, AlienVault OSSIM incurs additional costs due to its licensing price structure. If you are using AlienVault for security purposes at a certain level it can have a higher price point than the current pricing of Microsoft Sentinel."

"AlienVault OSSIM is an open-source solution."

"OSSIM is free."

"We are using the community version, which can be used for free."

"The licensing fees for the non-community edition are paid on an annual basis, and there are no costs in addition to this."

"The tool's licensing costs are yearly."

More AlienVault OSSIM pricing and cost advice

"The pricing is good, and it is not very expensive."

"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."

"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."

"Rapid7 InsightIDR is priced very well and is cost-effective."

"Rapid7 InsightIDR's pricing is reasonable."

"Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs."

"Rapid7 InsightIDR charges us based on the endpoints we connect to."

"It is more reasonably priced than other vendors."

More Rapid7 InsightIDR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

824,053 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

Comms Service Provider

Educational Organization

Computer Software Company

16%

Financial Services Firm

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about AlienVault OSSIM?

Asset discovery is good.

See all answers

What is your experience regarding pricing and costs for AlienVault OSSIM?

I used the paid version of the tool and found it to be expensive. It has been a while since I changed to Securonix. I will have to check whether AlienVault charges per device, user, or log.

See all answers

What needs improvement with AlienVault OSSIM?

There are somewhat more false positives with the user behavior analytics, which could benefit from an additional machine learning model to detect user patterns more rapidly. The integration capabil...

See all answers

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

See all answers

What do you like most about Rapid7 InsightIDR?

During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...

See all answers

What is your experience regarding pricing and costs for Rapid7 InsightIDR?

The product pricing is very cheap.

See all answers

Comparisons

Wazuh vs AlienVault OSSIM

Compared 82% of the time

Elastic Security vs AlienVault OSSIM

Compared 5% of the time

USM Anywhere vs AlienVault OSSIM

Compared 4% of the time

Splunk Enterprise Security vs AlienVault OSSIM

Compared 2% of the time

Microsoft Defender XDR vs AlienVault OSSIM

Compared 1% of the time

More AlienVault OSSIM Competitors

Darktrace vs Rapid7 InsightIDR

Compared 12% of the time

Microsoft Sentinel vs Rapid7 InsightIDR

Compared 11% of the time

Rapid7 InsightVM vs Rapid7 InsightIDR

Compared 8% of the time

CrowdStrike Falcon vs Rapid7 InsightIDR

Compared 6% of the time

Splunk Enterprise Security vs Rapid7 InsightIDR

Compared 5% of the time

More Rapid7 InsightIDR Competitors

Product Reports

Buyer's Guide

AlienVault OSSIM

December 2024

Download AlienVault OSSIM product report

Buyer's Guide

Rapid7 InsightIDR

December 2024

Download Rapid7 InsightIDR product report

Also Known As

OSSIM

InsightIDR

Learn More

Video not available

AT&T

Rapid7

Overview

AlienVault OSSIM, Open Source Security Information and Event Management (SIEM), provides you with a feature-rich open source SIEM complete with event collection, normalization and correlation. Launched by security engineers because of the lack of available open source products, AlienVault OSSIM was created specifically to address the reality many security professionals face: A SIEM, whether it is open source or commercial, is virtually useless without the basic security controls necessary for security visibility.

Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

Sample Customers

Council Rock School District

Liberty Wines, Pioneer Telephone, Visier

Buyer's Guide

AlienVault OSSIM vs. Rapid7 InsightIDR

December 2024

Free Report: AlienVault OSSIM vs. Rapid7 InsightIDR

Find out what your peers are saying about AlienVault OSSIM vs. Rapid7 InsightIDR and other solutions. Updated: December 2024.

DOWNLOAD NOW

824,053 professionals have used our research since 2012.

See our AlienVault OSSIM vs. Rapid7 InsightIDR report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.