Fortinet FortiSIEM vs Rapid7 InsightIDR comparison

Fortinet and Rapid7 are both solutions in the Security Information and Event Management (SIEM) category. Fortinet is ranked #8 with an average rating of 7.8, while Rapid7 is ranked #9 with an average rating of 8.1. Fortinet holds a 3.2% mindshare in SIEM, compared to Rapid7’s 2.6% mindshare. Additionally, 82% of Fortinet users are willing to recommend the solution, compared to 95% of Rapid7 users who would recommend it.

Fortinet FortiSIEM

Read 73 Fortinet FortiSIEM reviews

5,005 Views
3,335 Comparison Views

82% willing to recommend

Rapid7 InsightIDR

Read 31 Rapid7 InsightIDR reviews

5,093 Views
2,897 Comparison Views

95% willing to recommend

Fortinet FortiSIEM

Rapid7 InsightIDR

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Fortinet FortiSIEM and Rapid7 InsightIDR are leading solutions in the SIEM market. Rapid7 InsightIDR is seen as having the upper hand due to its superior feature set and ease of use.

Features: Fortinet FortiSIEM offers comprehensive security information and event management capabilities, real-time analysis, and scalability. Rapid7 InsightIDR has user-friendly advanced threat detection, incident response features, and strong integration capabilities.

Room for Improvement: Fortinet FortiSIEM needs to enhance its analytics functions, simplify configuration processes, and reduce deployment times. Rapid7 InsightIDR could improve its log management, fine-tune alerting mechanisms, and expand its customer support options.

Ease of Deployment and Customer Service: Fortinet FortiSIEM users experience longer deployment times and a learning curve. Rapid7 InsightIDR users praise its quick deployment and responsive customer support.

Pricing and ROI: Fortinet FortiSIEM is known for cost-effectiveness, providing solid ROI with lower initial costs. Rapid7 InsightIDR has higher setup costs but offers significant ROI through its advanced features.

To learn more, read our detailed Fortinet FortiSIEM vs. Rapid7 InsightIDR Report (Updated: December 2024).

Buyer's Guide

Fortinet FortiSIEM vs. Rapid7 InsightIDR

December 2024

Download the complete report

Helped 824,053 peers since 2012

Categories and Ranking

Fortinet FortiSIEM

Ranking in Security Information and Event Management (SIEM)

8th

Average Rating

7.6

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Rapid7 InsightIDR

Ranking in Security Information and Event Management (SIEM)

9th

Average Rating

8.4

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (3rd), Endpoint Detection and Response (EDR) (20th), Threat Deception Platforms (5th), Extended Detection and Response (XDR) (15th)

Mindshare comparison

As of December 2024, in the Security Information and Event Management (SIEM) category, the mindshare of Fortinet FortiSIEM is 3.2%, up from 3.3% compared to the previous year. The mindshare of Rapid7 InsightIDR is 2.6%, down from 2.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

HamedWasel

Senior Network Security Engineer at Orange

It's cheaper than other solutions with the same features but lacks integration with many third-party vendors

FortiSIEM needs to expand its integration with third-party vendors. I don't know if Forcepoint has been added, but there were limited resources for integrating Forcepoint solutions when we implemented FortiSIEM. It integrates well with other Fortinet products and solutions from established cybersecurity companies like Palo Alto but doesn't integrate with some of the newer vendors. I would also like to see FortiSIEM add more of the features available in FortiSOAR. You need to buy two separate solutions to get these features, but they should all be available in one product.

Read full review

Gerard Konan

Founder & CEO at AGILLY

Helps in the management of compliance, secret events and information

One of our customers had a Huawei firewall and we required help to do the configuration. However, the installation was easy with other standard vendors like Cisco and Check Point. The product's deployment got completed in four to five days and we required three people to handle it. One person was in charge of the portal's initial set up and the other one handled the integration of on-premises devices. The third one took care of Office 365 integration.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"FortiSIEM sends an email or SMS notifications to admins when there are significant incidents. It's a highly efficient way of responding to incidents."

"Fortinet FortiSIEM is less costly than other products and is available 24/7."

"FortiSIEM allows you to match IPs with threat intelligence feeds from sources like Kaspersky or Anomali, adding valuable context."

"FortiSIEM provides a single PIN to monitor SOC and NOC. It's a nice tool for integration and monitoring. It provides multiple categories for monitoring based on security designations like low, medium, and high."

"Fortinet FortiSIEM is highly scalable. I would rate its scalability nine out of ten."

"Fortinet FortiSIEM needs to provide better API integrations to users."

"We have many application systems, and I can set up Fortinet FortiSIEM for users to monitor their systems."

"It's easy to manage. There's a web interface and a command line, depending on what the user is comfortable with. There's a large knowledge base available, and the support is timely."

More Fortinet FortiSIEM pros

"Dashboards, including the main screen, provide much-needed information at a glance, without hours of coding and sifting through logs to find it. In case of an actual security incident, I have faith that insightIDR has retained all logs in a secure manner that prevents log tampering as well."

"Rapid7 InsightIDR integrates well with other solutions. It's also easy to configure because Rapid7 InsightIDR has a lot of instructions posted on their website that customers can follow if they need to get the source log."

"The solution is easy to use, and the interface is intuitive."

"The technical support is a solid 10 out of 10 as they take the time to answer any questions or problems which may arise in a reasonable time frame."

"The alerting to drive investigations and remediation has been its most valuable feature."

"The solution is very stable and works very well for what I need it to do."

"I am able to run automated actions based on the output of reports, leaving me extra time to focus on more pressing matters."

"InsightIDR’s ability to process millions of transactions per day, and to notify me of the most critical ones, is priceless. InsightIDR has the alerts tuned, and has the ability to quickly drill down to determine the threat level."

More Rapid7 InsightIDR pros

Cons

"The interface needs some improvements because it's a bit cumbersome when you're trying to view items. It takes some time to get used to. Additionally, sometimes the scrolling does not work."

"FortiSIEM is a bit resource-hungry, so work should be done on hardware resource utilization to consume less hardware."

"FortiSIEM could be better integrated with other vendors."

"Their technical support is horrible. By horrible, I mean a train wreck of a disaster that has fallen off a bridge and caught fire."

"They could work on their documentation. If there's anything about the solution that needs improvement, it's that. For example, documentation already is on a very high level but specifically on the CLI there are tons of features which can be fine-tuned and thousands of commands are very difficult to document. If they could make this easier, it would improve the overall solution."

"The graphs on the user interface could be improved as we often experience glitches."

"They need to integrate better with Cisco and Palo Alto."

"Sometimes, if there are changes made by a user on a database server, it can be difficult to get that information on the fly. I would like to see a situation where once I specify a user with the database server I need, and with the changes they have performed on that, I don't need to continue my search pattern to drill down just to get the information."

More Fortinet FortiSIEM cons

"The searching feature in Rapid7 InsightIDR needs to evolve"

"Rapid7 InsightIDR is not intuitive to search for logs. It should be more user-friendly and improve the dashboards. We should be able to use ready-made templates instead of having to build one."

"Tenable Nessus is easier to deal with. It's more efficient and accurate. InsightIDR is heavier than Tenable in terms of performance and scanning. Rapid7 would be much easier to use if it had a network connector like Tenable. Tenable's connector allows continuous monitoring over the B caps."

"Cloud risk assessment is one area where I think they need a lot of improvement."

"The APIs can be further improved in Rapid7."

"The ability to tune the collector for custom logs would greatly help."

"InsightIDR is only available in a cloud version. Some of our customers prefer an on-prem solution because they want to manage the security within their environment."

"They should add more configuration and security features to it."

More Rapid7 InsightIDR cons

Pricing and Cost Advice

"Fortinet FortiSIEM is cheaper compared to other products."

"The solution is available for both, perpetual and subscription licenses."

"Pricing is determined based on the customer's budget."

"If one is cheap and ten is expensive. I rate the tool's price as an eight out of ten. Compared with Splunk or Oracle, Fortinet is cheap."

"We pay for a license for FortiSIEM. We pay for the license and renewal."

"Fortinet FortiSIEM is very cost-efficient compared to other SIEM solutions."

"Manageable, however would be better as pay as you go versus CapEX."

"The price of the solution is expensive. The license is scalable. If there are 10 devices it is simple to license."

More Fortinet FortiSIEM pricing and cost advice

"Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs."

"It is a reasonably priced solution."

"It is more reasonably priced than other vendors."

"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help."

"Rapid7 InsightIDR is priced very well and is cost-effective."

"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."

"The pricing is good, and it is not very expensive."

"The pricing and licensing are competitive."

More Rapid7 InsightIDR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

824,053 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

Government

Manufacturing Company

Computer Software Company

16%

Financial Services Firm

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Fortinet FortiSIEM?

Fortinet FortiSIEM needs to provide better API integrations to users.

See all answers

What is your experience regarding pricing and costs for Fortinet FortiSIEM?

Fortinet FortiSIEM is high-priced. Previously, its licensing model required separate licenses for devices, agents, and EPS, which was quite rigid. The revised model is subscription-based and more f...

See all answers

What needs improvement with Fortinet FortiSIEM?

FortiSIEM is a bit resource-hungry, so work should be done on hardware resource utilization to consume less hardware. Another major problem is its licensing model, which initially required separate...

See all answers

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

See all answers

What do you like most about Rapid7 InsightIDR?

During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...

See all answers

What is your experience regarding pricing and costs for Rapid7 InsightIDR?

The product pricing is very cheap.

See all answers

Comparisons

IBM Security QRadar vs Fortinet FortiSIEM

Compared 13% of the time

Wazuh vs Fortinet FortiSIEM

Compared 12% of the time

Splunk Enterprise Security vs Fortinet FortiSIEM

Compared 10% of the time

Microsoft Sentinel vs Fortinet FortiSIEM

Compared 8% of the time

ManageEngine Log360 vs Fortinet FortiSIEM

Compared 3% of the time

More Fortinet FortiSIEM Competitors

Darktrace vs Rapid7 InsightIDR

Compared 12% of the time

Microsoft Sentinel vs Rapid7 InsightIDR

Compared 11% of the time

Rapid7 InsightVM vs Rapid7 InsightIDR

Compared 8% of the time

CrowdStrike Falcon vs Rapid7 InsightIDR

Compared 6% of the time

Tanium vs Rapid7 InsightIDR

Compared 2% of the time

More Rapid7 InsightIDR Competitors

Product Reports

Buyer's Guide

Fortinet FortiSIEM

December 2024

Download Fortinet FortiSIEM product report

Buyer's Guide

Rapid7 InsightIDR

December 2024

Download Rapid7 InsightIDR product report

Also Known As

FortiSIEM, AccelOps

InsightIDR

Learn More

Fortinet

Rapid7

Overview

FortiSIEM (formerly AccelOps 4) provides an actionable security intelligence platform to monitor security, performance and compliance through a single pane of glass.

Companies around the world use FortiSIEM for the following use cases:

Threat management and intelligence that provide situational awareness and anomaly detection
Alleviating compliance mandate concerns for PCI, HIPAA and SOX
Managing “alert overload”
Handling the “too many tools” reporting issue
Addressing the MSPs/MSSPs pain of meeting service level agreements

Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

Sample Customers

FortiSIEM has hundreds of customers worldwide in markets including managed services, technology, financial services, healthcare, and government. Customers include Aruba Networks, Compushare, Port of San Diego, Cleveland Indians, Infoblox, Healthways, and Referentia.

Liberty Wines, Pioneer Telephone, Visier

Buyer's Guide

Fortinet FortiSIEM vs. Rapid7 InsightIDR

December 2024

Free Report: Fortinet FortiSIEM vs. Rapid7 InsightIDR

Find out what your peers are saying about Fortinet FortiSIEM vs. Rapid7 InsightIDR and other solutions. Updated: December 2024.

DOWNLOAD NOW

824,053 professionals have used our research since 2012.

See our Fortinet FortiSIEM vs. Rapid7 InsightIDR report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.