ArcSight Security Open Data Platform vs Rapid7 InsightIDR comparison

"The product provides a collective view through the Enterprise Security Manager, offering insights into past events and heuristics about future incidents before they occur and impact the organization."

"Great coverage of all systems within our network from endpoint to firewall."

"The ability to ingest Office 365 log files, then process them into events and display them on a map."

"The solution is easy to use, and the interface is intuitive."

"Another very important part of insightIDR is the ability to collect data from endpoint devices via agent software. With a large remote workforce, this allows visibility into the endpoints that are connected to the internet, but not to the corporate network."

"Rapid7's reporting is more robust than Tenable's."

"Features for user behavior analytics and the rules for attack review are good."

"During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an application belongs to a known ransomware group. The system rates the threat, offering a clear detection ratio, such as 97 out of 100. It not only identifies threats but also illustrates the associated behaviors, helping us understand the potential risk to a particular endpoint."

"I like that it's a cloud-based solution."

"ArcSight Security Open Data Platform needs to improve stability. Support has deteriorated after the acquisition of OpenText. It should also improve market awareness."

"The solution needs improvement in threat intelligence. Increasing the depth of intelligence to help users understand more about threats is a possibility. My suggestion is to expand access to other websites or resources."

"Tenable Nessus is easier to deal with. It's more efficient and accurate. InsightIDR is heavier than Tenable in terms of performance and scanning. Rapid7 would be much easier to use if it had a network connector like Tenable. Tenable's connector allows continuous monitoring over the B caps."

"I feel it would greatly benefit from more supported log sources."

"Customised alert recipients need to be added to allow better first-line action and quicker response. Configurable honeypots would be a welcome addition."

"It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required."

"InsightIDR is only available in a cloud version. Some of our customers prefer an on-prem solution because they want to manage the security within their environment."

"One of the things that could be better is digital forensics. It is there, but it can be better. They could provide more on the endpoint detection level."

"Currently, it lacks the functionalities provided by Rapid7's User Behavior Analytics (UBA)."

"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."

"Rapid7 InsightIDR's pricing is reasonable."

"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."

"It is more reasonably priced than other vendors."

"The pricing is good, and it is not very expensive."

"Rapid7 InsightIDR charges us based on the endpoints we connect to."

"It is a reasonably priced solution."

"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."