AWS Security Hub vs Rapid7 InsightIDR comparison

The compared Amazon Web Services (AWS) and Rapid7 solutions aren't in the same category. Amazon Web Services (AWS) is ranked #16 in CSPM , with an average rating of 7.6, and holds a 3.9% mindshare in the category. Rapid7 is ranked #15 in SIEM , with an average rating of 7.8, and holds a 2.2% mindshare. Additionally, 89% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 96% of Rapid7 users who would recommend it.

AWS Security Hub

Read 26 AWS Security Hub reviews

7,113 Views
3,130 Comparison Views

89% willing to recommend

Rapid7 InsightIDR

Read 32 Rapid7 InsightIDR reviews

6,636 Views
3,252 Comparison Views

96% willing to recommend

AWS Security Hub

Rapid7 InsightIDR

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Rapid7 InsightIDR and AWS Security Hub compete in the security solutions category. Users are happier with Rapid7 InsightIDR's pricing and support, while AWS Security Hub is valued for its comprehensive features.

Features: Rapid7 InsightIDR's features include advanced threat detection, user behavior analytics, and integrated incident response. AWS Security Hub has extensive integration capabilities, a centralized security view, and automated compliance checks. Users find AWS Security Hub more robust in feature set compared to Rapid7 InsightIDR.

Room for Improvement: Rapid7 InsightIDR users seek enhanced customization options and better third-party integrations. AWS Security Hub users desire improved alert accuracy and easier configuration. Therefore, the need for improvement is unique to each product, reflecting different user priorities.

Ease of Deployment and Customer Service: Rapid7 InsightIDR deployment is seen as straightforward with strong customer service support. AWS Security Hub also benefits from positive deployment experiences but has mixed feedback on customer service. Rapid7 InsightIDR tends to be preferred for ease of deployment and customer support responsiveness.

Pricing and ROI: Users generally find Rapid7 InsightIDR pricing reasonable and reflecting good ROI. AWS Security Hub users feel that, despite higher initial setup costs, the ROI is justified by the breadth of features and integration benefits. Hence, Rapid7 InsightIDR is chosen for cost-effectiveness, while AWS Security Hub is preferred for value despite its cost.

To learn more, read our detailed AWS Security Hub vs. Rapid7 InsightIDR Report (Updated: October 2024).

Buyer's Guide

AWS Security Hub vs. Rapid7 InsightIDR

October 2024

Download the complete report

Helped 881,176 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AWS Security Hub

Average Rating

7.6

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Security Orchestration Automation and Response (SOAR) (6th), Cloud Security Posture Management (CSPM) (16th)

Rapid7 InsightIDR

Average Rating

8.4

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (15th), User Entity Behavior Analytics (UEBA) (7th), Endpoint Detection and Response (EDR) (22nd), Threat Deception Platforms (4th), Extended Detection and Response (XDR) (18th)

Mindshare comparison

While both are Security Software solutions, they serve different purposes. AWS Security Hub is designed for Cloud Security Posture Management (CSPM) and holds a mindshare of 3.9%, down 4.6% compared to last year.
Rapid7 InsightIDR, on the other hand, focuses on Security Information and Event Management (SIEM), holds 2.2% mindshare, down 2.6% since last year.

Cloud Security Posture Management (CSPM) Market Share Distribution
Product	Market Share (%)
AWS Security Hub	3.9%
Wiz	16.6%
Prisma Cloud by Palo Alto Networks	9.6%
Other	69.9%

Cloud Security Posture Management (CSPM)

Security Information and Event Management (SIEM) Market Share Distribution
Product	Market Share (%)
Rapid7 InsightIDR	2.2%
Splunk Enterprise Security	7.4%
Wazuh	7.3%
Other	83.1%

Security Information and Event Management (SIEM)

Featured Reviews

Karthik Ekambaram

Director at Scybers

Has helped identify misconfigurations and prioritize risks but lacks multi-cloud support and deeper integration features

AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other products in the market for CSPM that can give you multi-cloud environment misconfigurations, even Microsoft for that matter. Regarding the integration of AWS Security Hub with third-party tools, I am not certain whether we can integrate them, but there is no need to do so. However, AWS Security Hub cannot integrate with other cloud providers, so it only supports the AWS environment. The compliance checks within AWS Security Hub are good, but we don't use them much. We utilize compliance frameworks such as CIS compliance frameworks and ISO 27017 framework, which are beneficial, but it can improve in other areas too, such as including NIST and other frameworks beyond just ISO and CIS. Improvements can be applicable for scalability, particularly on integration with multi-cloud environments, and compliance frameworks can be added for more variety as well. The unified dashboard in AWS Security Hub is adequate; I cannot say it is exceptional, but the content available in the dashboards is satisfactory for now.

Read full review

SohailHyder

Head of Cyber Security at Super Secure

Has supported compliance needs for mid-sized organizations but lacks customization and advanced integration

If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is. This is where it can improve if we keep in front the feature sets of a complete SIEM solution. Most common in the market is QRadar, but it is depleting now. It has been taken over by some other products such as Splunk and LogRhythm. If we compare these things with Rapid7 InsightIDR, then there are definitely some gaps that need to be filled. Data retention is also one concern because Rapid7 InsightIDR is cloud-based and operates on a subscription model. Whatever data you want to retain, it has to be paid for separately or it has a cost. Other solutions that are on-premises can have their own infrastructure or they provide some data retention for a month or in some capacity-wise, they provide that solution to them which makes them more attractive.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Security Hub provides insightful information about what is running and where there might be weaknesses."

"Very good at detection and providing real-time alerts."

"The platform has valuable features for security."

"AWS Security Hub can check your infrastructure against multiple compliance frameworks. You can turn on or off specific frameworks based on your needs."

"Cloudposse is a valuable feature as it guarantees my security."

"The solution shows us our compliance score."

"The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud."

"AWS Security Hub brings many features into one table that is quite useful, and the app team finds it easier to see what is missing."

More AWS Security Hub pros

"Rapid7's reporting is more robust than Tenable's."

"Rapid7 is easy to use and deploy. It is a simple solution and has easy data pulling."

"Another very important part of insightIDR is the ability to collect data from endpoint devices via agent software. With a large remote workforce, this allows visibility into the endpoints that are connected to the internet, but not to the corporate network."

"The solution provides satisfying native integration features"

"InsightIDR has allowed us to find potential security issues that we did not know existed, and get remediation quickly."

"I am able to run automated actions based on the output of reports, leaving me extra time to focus on more pressing matters."

"Great coverage of all systems within our network from endpoint to firewall."

"The solution is very stable and works very well for what I need it to do."

More Rapid7 InsightIDR pros

Cons

"Security needs to be measured based on their own criteria. We can't add custom criteria specific to our organization. For example, having an S3 bucket publicly available might be flagged as a critical alert, but it might not be critical in a sandbox environment. So, it gets flagged as critical, which becomes a false positive. So, customization options and creating custom dashboards would be areas for improvement."

"Security Hub is currently not worth investing in, as it requires more configurations and integration with other services to work effectively."

"The solution should be easier to learn and use"

"The solution will only give you insight if you have configure rule enabled. It should work more like Prisma Cloud and Dome9 which have a better approach."

"Whenever my team gets some alarms from the central team, my team needs to initiate whether it's a real or false trigger. The central team needs to keep adjusting to the parameters or at least the concerned IPs, whether it's really from the company's pool of IPs, so the trigger process can be improved. In the next release of AWS Security Hub, I'd like a better dashboard that could result in better alert visibility."

"The support must be quicker."

"AWS Security Hub should improve the time it takes to update. It takes a long period of time when updating. It can take 24 hours sometimes to update. Additionally, when integrating this solution with more security tools, takes time."

"Shortening the response time for support tickets, particularly in production issues, could make the service more efficient."

More AWS Security Hub cons

"The ability to tune the collector for custom logs would greatly help."

"The dashboard is an area that could be simplified."

"Rapid7 doesn't integrate well with all our security tools from various vendors, so we plan to switch. Many of our solutions work with Rapid7, but some do not. We are already searching for a replacement already."

"InsightIDR's integration with other solutions could be improved. Also, I'd like more control from the portal over what's happening on the endpoint side. For example, when I see an attack on an endpoint, I want to be able to stop it from the portal."

"InsightIDR is only available in a cloud version. Some of our customers prefer an on-prem solution because they want to manage the security within their environment."

"It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required."

"Rapid7 InsightIDR is not intuitive to search for logs. It should be more user-friendly and improve the dashboards. We should be able to use ready-made templates instead of having to build one."

"One thing that springs to mind is easier API integration with ITSMs. We are evaluating a new ITSM and I would like to have InsightIDR create a ticket when an attack is identified, and the ticket would be closed in InsightIDR when the ITSM resolution is completed. This would take out the "single point of failure" we currently have, if the email recipient is somehow absent, in recording the risk appetite for the incident and the actions taken to mitigate or not."

More Rapid7 InsightIDR cons

Pricing and Cost Advice

"The pricing is fine. It is not an expensive tool."

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"The price of the solution is not very competitive but it is reasonable."

"There are multiple subscription models, like yearly, monthly, and packaged."

"AWS Security Hub's pricing is pretty reasonable."

"Security Hub is not an expensive solution."

"The price of AWS Security Hub is average compared to other solutions."

"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."

"Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs."

"It is more reasonably priced than other vendors."

"I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability."

"Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."

"Rapid7 InsightIDR is priced very well and is cost-effective."

"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help."

"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."

"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."

More Rapid7 InsightIDR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

881,176 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at a comms service provider with 10,001+ employees

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Computer Software Company

12%

Financial Services Firm

12%

Manufacturing Company

10%

Government

Computer Software Company

11%

Financial Services Firm

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	5
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	5
Large Enterprise	6

Questions from the Community

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...

See all answers

What do you like most about AWS Security Hub?

The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud.

See all answers

What needs improvement with AWS Security Hub?

See all answers

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

See all answers

What do you like most about Rapid7 InsightIDR?

During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...

See all answers

What is your experience regarding pricing and costs for Rapid7 InsightIDR?

The product pricing is very cheap.

See all answers

Comparisons

Microsoft Sentinel vs AWS Security Hub

Compared 35% of the time

Wiz vs AWS Security Hub

Compared 8% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 8% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 5% of the time

CrowdStrike Falcon Cloud Security vs AWS Security Hub

Compared 3% of the time

More AWS Security Hub Competitors

Rapid7 InsightVM vs Rapid7 InsightIDR

Compared 6% of the time

Microsoft Sentinel vs Rapid7 InsightIDR

Compared 5% of the time

Splunk Enterprise Security vs Rapid7 InsightIDR

Compared 5% of the time

CrowdStrike Falcon vs Rapid7 InsightIDR

Compared 4% of the time

Darktrace vs Rapid7 InsightIDR

Compared 4% of the time

More Rapid7 InsightIDR Competitors

Product Reports

Buyer's Guide

AWS Security Hub

January 2026

Download AWS Security Hub product report

Buyer's Guide

Rapid7 InsightIDR

January 2026

Download Rapid7 InsightIDR product report

Also Known As

SQRRL

InsightIDR

Overview

AWS Security Hub is a comprehensive security service that provides a centralized view of security alerts and compliance status across an AWS environment. It collects data from various AWS services, partner solutions, and AWS Marketplace products to provide a holistic view of security posture. With Security Hub, users can quickly identify and prioritize security issues, automate compliance checks, and streamline remediation efforts.

The service offers a range of features including continuous monitoring, threat intelligence integration, and customizable dashboards. It also provides automated insights and recommendations to help users improve their security posture. Security Hub integrates with other AWS services like Amazon GuardDuty, AWS Config, and AWS Macie to provide a unified security experience. Additionally, it supports integration with third-party security tools through its API, allowing users to leverage their existing security investments.

With its user-friendly interface and powerful capabilities, AWS Security Hub is a valuable tool for organizations looking to enhance their security and compliance posture in the cloud.

Amazon Web Services (AWS)

Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

Rapid7

Sample Customers

Edmunds, Frame.io, GoDaddy, Realtor.com

Liberty Wines, Pioneer Telephone, Visier

Buyer's Guide

AWS Security Hub vs. Rapid7 InsightIDR

October 2024

Free Report: AWS Security Hub vs. Rapid7 InsightIDR

Find out what your peers are saying about AWS Security Hub vs. Rapid7 InsightIDR and other solutions. Updated: October 2024.

DOWNLOAD NOW

881,176 professionals have used our research since 2012.

See our AWS Security Hub vs. Rapid7 InsightIDR report.

We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.