Try our new research platform with insights from 80,000+ expert users

ArcSight Analytics vs Rapid7 InsightIDR comparison

OpenText and Rapid7 are both solutions in the User Entity Behavior Analytics (UEBA) category. OpenText is ranked #13 with an average rating of 9.0, while Rapid7 is ranked #2 with an average rating of 8.2. OpenText holds a 1.2% mindshare in UBA, compared to Rapid7’s 11.3% mindshare. Additionally, 66% of OpenText users are willing to recommend the solution, compared to 95% of Rapid7 users who would recommend it.
ArcSight Analytics
Read 15 ArcSight Analytics reviews
  • 272 Views
  • 106 Comparison Views
66% willing to recommend
Rapid7 InsightIDR
Read 32 Rapid7 InsightIDR reviews
  • 1,110 Views
  • 679 Comparison Views
95% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Feb 4, 2025

Rapid7 InsightIDR and ArcSight Analytics compete in the cybersecurity platform category, focusing on threat detection and response. Rapid7 InsightIDR seems to have the upper hand in ease of use and cost-effectiveness, whereas ArcSight Analytics excels in offering a robust feature set for more advanced security needs.

Features: Rapid7 InsightIDR offers intuitive threat detection, user-friendly integration, and comprehensive forensic depth. ArcSight Analytics provides a powerful correlation engine, customizable dashboards, and complex data analysis capabilities tailored for advanced security environments.

Room for Improvement: Rapid7 InsightIDR could enhance its complex alert management, improve data visualization, and expand integration with third-party solutions. ArcSight Analytics might simplify its user interface, streamline setup and deployment processes, and improve resource management to cater to smaller teams.

Ease of Deployment and Customer Service: Rapid7 InsightIDR ensures streamlined deployment with extensive support, offering a more straightforward onboarding. ArcSight Analytics requires a more complex setup, potentially challenging for organizations with limited resources, though it provides robust capabilities once implemented.

Pricing and ROI: Rapid7 InsightIDR is characterized by lower setup costs and a quicker return on investment, appealing to budget-conscious organizations. Despite its higher initial costs, ArcSight Analytics promises long-term value through its extensive features and scalability, aligning with organizations prioritizing feature-rich solutions.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed ArcSight Analytics vs. Rapid7 InsightIDR Report (Updated: March 2025).
Buyer's Guide
ArcSight Analytics vs. Rapid7 InsightIDR
March 2025
Download the complete report
Helped 846,617 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ArcSight Analytics
Ranking in User Entity Behavior Analytics (UEBA)
13th
Average Rating
7.0
Reviews Sentiment
6.7
Number of Reviews
15
Ranking in other categories
No ranking in other categories
Rapid7 InsightIDR
Ranking in User Entity Behavior Analytics (UEBA)
2nd
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
32
Ranking in other categories
Security Information and Event Management (SIEM) (9th), Endpoint Detection and Response (EDR) (18th), Threat Deception Platforms (5th), Extended Detection and Response (XDR) (14th)
 

Mindshare comparison

As of April 2025, in the User Entity Behavior Analytics (UEBA) category, the mindshare of ArcSight Analytics is 1.2%, down from 1.6% compared to the previous year. The mindshare of Rapid7 InsightIDR is 11.3%, up from 8.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Entity Behavior Analytics (UEBA)
 

Q&A Highlights

Navin Rehnius - PeerSpot reviewer
Aug 10, 2021
What SOC product do you recommend?
I haven't used these big-name ones like Splunk etc. but I feel they're overpriced. I think they charge an arm and a leg for each module. The ROI justification is not there. Why not try a cheaper and robust alternative like Elasticsearch?
See all answers
 

Featured Reviews

Syed Ubaid Ali Jafri - PeerSpot reviewer
It has improved our system and network policy monitoring
They should improve on the following: * Timely resolution of issues and proper support once a ticket has been generated. * Systems appearing on the network which are not part of the domain controller. These should be monitored. * Inactive connections from servers, which are upgraded or downgraded within a VM, should be automatically revoked. * Logger monitoring should be separated from ESM monitoring. * Ability to integrate with cloud-based applications and monitor cloud-based events. * Ability to log and notify tailored rules via SMS/email. * Provide more ArcSight training and workshops.
Read full review
Asim Naeem - PeerSpot reviewer
Providing comprehensive insight into alerts while working towards AI enhancement
I definitely recommend Rapid7 InsightIDR. It is becoming better, with improvements being continuously made to the product. Right now, I do not have any advice about Rapid7 for other users because every organization or user has different criteria or multiple use cases, so I refrain from commenting on that. I rate the overall solution seven out of ten.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The correlation engine is good."
"The data collection and the integration with different products are valuable features."
"Allows multiple integrations with multiple systems in a stable and flexible fashion."
"The ability to correlate different logs is the solution's most valuable feature."
"This solution makes it easy to create use cases, and it is easy to move queries from use cases to the report to the dashboard."
"The two most valuable features of this solution are its stability and scalability."
"The most valuable feature is the log monitoring."
"This solution allows us to identify connections for all users."
More ArcSight Analytics pros
"I like the tool's user analysis feature."
"If you were on other solutions, you would notice that they use agents from third-party, from open-source, from a native OS, or from other tools. Here, however, it is an agent from Rapid7 itself. This adds to the solution's overall capabilities."
"The solution is very scalable in terms of the licensing model."
"I definitely recommend Rapid7 InsightIDR."
"The biggest reason why we chose Rapid7 was to gain value in a really quick time. Its deployment doesn't take months. It just takes a few days."
"InsightIDR’s ability to process millions of transactions per day, and to notify me of the most critical ones, is priceless. InsightIDR has the alerts tuned, and has the ability to quickly drill down to determine the threat level."
"The solution is easy to use, and the interface is intuitive."
"During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an application belongs to a known ransomware group. The system rates the threat, offering a clear detection ratio, such as 97 out of 100. It not only identifies threats but also illustrates the associated behaviors, helping us understand the potential risk to a particular endpoint."
More Rapid7 InsightIDR pros
 

Cons

"The GUI interface is not always intuitive and easy for non-technical users to work with."
"Inactive connections from servers, which are upgraded or downgraded within a VM, should be automatically revoked."
"Their support team could be better."
"It needs more user analytics and aggregation user queries. And it's slow. When you query over ArcSight, it is very slow."
"There is a GUI, but it is not complete and lacks functionality that needs to be performed using the console."
"I would like to see integration with automation products, such as Phantom Automation."
"ArcSight is not a user-friendly solution and the interface needs to be improved."
"Network integration is very crucial, and you need to have the knowledge to get it done."
More ArcSight Analytics cons
"It would be useful to import threat intelligence in YARA format along with known incorrect email addresses.​"
"The solution's XDR agents cannot compete with the XDR solutions out there yet."
"The APIs can be further improved in Rapid7."
"Tenable Nessus is easier to deal with. It's more efficient and accurate. InsightIDR is heavier than Tenable in terms of performance and scanning. Rapid7 would be much easier to use if it had a network connector like Tenable. Tenable's connector allows continuous monitoring over the B caps."
"The reporting is the weakest aspect. There needs to be multi-level grouping for events (for example, group by user and destination). Right now, we can do a group by user and a separate table or group by destination. But I'd be more interested in where a person was logging into instead of who was logging in or where he was logging in."
"They should add more configuration and security features to it."
"Rapid7 InsightIDR is not intuitive to search for logs. It should be more user-friendly and improve the dashboards. We should be able to use ready-made templates instead of having to build one."
"The product allows us to make only 30 custom rules."
More Rapid7 InsightIDR cons
 

Pricing and Cost Advice

"This solution is expensive."
"The monthly licensing fee is around $20,000. There aren't any costs in addition to the standard licensing fee."
"ArcSight Analytics is a bit expensive compared with other tools in terms of licensing costs, training, hardware implementation, and support."
"My customers pay a yearly licensing fee for ArcSight Analytics."
"It can range between $30,000 and $40,000 USD, and can go up to $500,000 and $600,000 USD."
"In addition to the costs of standard licensing fees, there is the cost of labor for maintenance."
"Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."
"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."
"The pricing and licensing are competitive."
"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help.​"
"Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs."
"​Accurately predict your licensing counts as this is a subscription based product.​"
"The pricing of the solution depends on the user. But there is a yearly licensing cost."
"Rapid7 InsightIDR is priced very well and is cost-effective."
More Rapid7 InsightIDR pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
See recommendations
846,617 professionals have used our research since 2012.
 

Answers from the Community

Navin Rehnius - PeerSpot reviewer
Aug 10, 2021
Aug 10, 2021
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, remember that any EDR/XDR should integrate to the SIEM/SOAR and a strong threat intel source. If you consider SOC outsourcing take your time and find one you can integrate like a virtual team member. They a...
2 out of 12 answers
KM
Jul 26, 2021
I haven't used these big-name ones like Splunk etc. but I feel they're overpriced. I think they charge an arm and a leg for each module. The ROI justification is not there. Why not try a cheaper and robust alternative like Elasticsearch?
Read full answer
KA
Jul 26, 2021
We are using LogRthythm SIEM complete case management and offer SIEM/SOC as service.
Read full answer
See all 12 answers
 

Top Industries

By visitors reading reviews
No data available
Computer Software Company
16%
Financial Services Firm
9%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
See all answers
What do you like most about ArcSight Analytics?
ArcSight Analytics is used to get a deeper insight and threat analysis about the network.
See all answers
What is your experience regarding pricing and costs for ArcSight Analytics?
My customers pay a yearly licensing fee for ArcSight Analytics.
See all answers
What do you like most about Rapid7 InsightIDR?
During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...
See all answers
What is your experience regarding pricing and costs for Rapid7 InsightIDR?
The product pricing is very cheap.
See all answers
What needs improvement with Rapid7 InsightIDR?
There is a future in AI with Rapid7, however, it is not fully operated. There are certain limitations with Rapid7 that I am working on. I have already opened a list of features with Rapid7, and the...
See all answers
 

Comparisons

No data available
Darktrace vs Rapid7 InsightIDR Logo
Darktrace vs Rapid7 InsightIDR
Compared 10% of the time
Microsoft Sentinel vs Rapid7 InsightIDR Logo
Microsoft Sentinel vs Rapid7 InsightIDR
Compared 9% of the time
Rapid7 InsightVM vs Rapid7 InsightIDR Logo
Rapid7 InsightVM vs Rapid7 InsightIDR
Compared 8% of the time
CrowdStrike Falcon vs Rapid7 InsightIDR Logo
CrowdStrike Falcon vs Rapid7 InsightIDR
Compared 5% of the time
Splunk Enterprise Security vs Rapid7 InsightIDR Logo
Splunk Enterprise Security vs Rapid7 InsightIDR
Compared 5% of the time
More Rapid7 InsightIDR Competitors
 

Product Reports

Buyer's Guide
ArcSight Analytics
April 2025
ArcSight Analytics reportDownload ArcSight Analytics product report
Buyer's Guide
Rapid7 InsightIDR
March 2025
Rapid7 InsightIDR reportDownload Rapid7 InsightIDR product report
 

Also Known As

ArcSight User Behavior Analytics, ArcSight UBA
InsightIDR
 

Overview

ArcSight User Behavior Analytics offers enterprises the ability to monitor and detect from internal and external security threats and fraud.

OpenText

Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

Rapid7
 

Sample Customers

Information Not Available
Liberty Wines, Pioneer Telephone, Visier
Buyer's Guide
ArcSight Analytics vs. Rapid7 InsightIDR
March 2025
Free Report: ArcSight Analytics vs. Rapid7 InsightIDR
Find out what your peers are saying about ArcSight Analytics vs. Rapid7 InsightIDR and other solutions. Updated: March 2025.
DOWNLOAD NOW
846,617 professionals have used our research since 2012.
See our ArcSight Analytics vs. Rapid7 InsightIDR report.
See our list of best User Entity Behavior Analytics (UEBA) vendors.

We monitor all User Entity Behavior Analytics (UEBA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.