Logpoint vs Rapid7 InsightIDR comparison

Logpoint and Rapid7 are both solutions in the Security Information and Event Management (SIEM) category. Logpoint is ranked #29 with an average rating of 8.3, while Rapid7 is ranked #23 with an average rating of 7.5. Additionally, 86% of Logpoint users are willing to recommend the solution, compared to 96% of Rapid7 users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Logpoint and Rapid7 InsightIDR are both robust security information and event management (SIEM) solutions. Rapid7 InsightIDR is favored due to its comprehensive features and value despite higher costs compared to Logpoint.

Features: Logpoint is known for its ease of use, efficient log management, and security analytics capabilities. Rapid7 InsightIDR offers advanced threat detection, investigation, and response features. Users highlight InsightIDR's asset prioritization and automated response workflows as particularly valuable.

Room for Improvement: Users suggest Logpoint improve its integration with third-party tools, its alerting system, and reporting functionalities. Rapid7 InsightIDR users indicate the need for enhancements in reporting functionalities, reduction of false positives, and improvements in usability to counter initial complexity.

Ease of Deployment and Customer Service: Logpoint users report a straightforward deployment process and satisfactory customer service. Rapid7 InsightIDR also receives positive feedback on ease of deployment, though some users mention a steep learning curve. Both products provide reliable customer service, but Logpoint's simpler deployment process is more appealing for customers with limited IT resources.

Pricing and ROI: Logpoint users find the pricing competitive and the return on investment satisfactory. Rapid7 InsightIDR, while more expensive, is considered worth the investment due to its superior features and capabilities. Users note that despite higher costs, InsightIDR offers a better ROI through enhanced security and efficiency.

To learn more, read our detailed Logpoint vs. Rapid7 InsightIDR Report (Updated: May 2026).

Buyer's Guide

Logpoint vs. Rapid7 InsightIDR

May 2026

Download the complete report

Helped 896,467 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Rifat Hasan

System Engineer at Corporate Projukti Limited

Has lacked proper integration and consistent support communication

I selected Logpoint for the pricing as it is reasonable. I am located in Bangladesh, South Asia, Dhaka. I have tried to contact Exabeam by mail repeatedly, but there has been no response. My company, Corporate Projukti Limited, including my Bangladesh area head, technical director, and team manager, have sent emails to contact Exabeam solution, but there is no response. There is already a distributor in Bangladesh. The weakness with Logpoint is UEBA. UEBA is recommended, but not extra. Exabeam's UEBA is an extra feature. SOAR is extra, but Logpoint's product measurement is 40 or 50. There is a 10% difference with the UEBA and SOAR, so Logpoint is weak there. I would appreciate extra features in Logpoint such as SOAR. SOAR and UEBA are included features in Logpoint. Logpoint's UEBA is a weak point, while Exabeam's UEBA has extra AI through automation. Exabeam has a license included, and the extra license is an add-on. In Logpoint, it is included, which makes it a weak point.

Read full review

SohailHyder

Head Of Cyber Security at Super Secure

Has supported compliance needs for mid-sized organizations but lacks customization and advanced integration

If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is. This is where it can improve if we keep in front the feature sets of a complete SIEM solution. Most common in the market is QRadar, but it is depleting now. It has been taken over by some other products such as Splunk and LogRhythm. If we compare these things with Rapid7 InsightIDR, then there are definitely some gaps that need to be filled. Data retention is also one concern because Rapid7 InsightIDR is cloud-based and operates on a subscription model. Whatever data you want to retain, it has to be paid for separately or it has a cost. Other solutions that are on-premises can have their own infrastructure or they provide some data retention for a month or in some capacity-wise, they provide that solution to them which makes them more attractive.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is easy to use."

"I recognize that Cortex XDR by Palo Alto Networks is one of the best products in its category regarding capabilities."

"My advice for others looking into using Cortex is that it is very easy to use and very useful for the customer environment, whether it's a public or private one."

"The dashboard is customizable."

"Its interface and pricing are most valuable, and it is better than other vendors in terms of security."

"What I like about Cortex XDR by Palo Alto Networks is that it is a comprehensive solution that contains everything the organization may need when using endpoints."

"It blocks malicious files, prevents attacks, and doesn't require many updates because it is a very light application."

"Traps pays for itself within the first 16 months of a three-year subscription."

More Cortex XDR by Palo Alto Networks pros

"The solution offers excellent reporting features. Our customers have been satisfied that they have been able to meet their compliance needs by giving them a standard report."

"It is a good cost proposition, and it works extremely well and very fast."

"Technical support is responsive and very friendly."

"The solution's user interface is quite simple, and the integration is better than other products."

"It is a very comprehensive solution for gathering data. It has got a lot of capabilities for collecting logs from different systems. Logs are notoriously difficult to collect because they come in all formats. LogPoint has a very sophisticated mechanism for you to be able to connect to or listen to a system, get the data, and parse it. Logs come in text formats that are not easily parseable because all logs are not the same, but with LogPoint, you can define a policy for collecting the data. You can create a parser very quickly to get the logs into a structured mechanism so that you can analyze them."

"The flexibility of the search feature and the solution's analytics features are the most valuable parts of the solution."

"They basically charge you in a better way."

"The UEBA component, as well as the SOAR component, are some of the most valuable features of Logpoint."

More Logpoint pros

"Dashboards, including the main screen, provide much-needed information at a glance, without hours of coding and sifting through logs to find it. In case of an actual security incident, I have faith that insightIDR has retained all logs in a secure manner that prevents log tampering as well."

"The alerting to drive investigations and remediation has been its most valuable feature, plus the ability to quickly search multiple logs makes investigations easier."

"The solution provides satisfying native integration features"

"It improved my organization by building a security alerting program."

"I am able to run automated actions based on the output of reports, leaving me extra time to focus on more pressing matters."

"I definitely recommend Rapid7 InsightIDR."

"Enables the use of honey pots, honey users, and honey files to monitor for suspicious patterns."

"During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an application belongs to a known ransomware group. The system rates the threat, offering a clear detection ratio, such as 97 out of 100. It not only identifies threats but also illustrates the associated behaviors, helping us understand the potential risk to a particular endpoint."

More Rapid7 InsightIDR pros

Cons

"It is not a suitable solution if you are looking for a single product with multiple features such as DLP, encryption, rollback, etc."

"In general, the price could be more competitive."

"It is a complex solution to implement."

"The deployment is pretty hard."

"If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive."

"Data privacy is a matter of concern. You have to be careful with data privacy, it can be sensitive and Cortex can have most of your access."

"Impact on system performance is horrible, adding a lot of delays for users."

More Cortex XDR by Palo Alto Networks cons

"In terms of functionality, it is very good. The only issue is the documentation. Its documentation should be improved."

"Log management could be better because transporting the log from a password to the client system takes time."

"It is a good product, but its interface or GUI could be better."

"LogPoint must find a way to integrate the servers without agents."

"I know that they have user behavior analytics, but it's an extra cost for this feature."

"Logpoint's UEBA is a weak point, while Exabeam's UEBA has extra AI through automation."

"Dashboards could be developed further."

"I would rate the stability of Logpoint as a six out of ten. I have received reports indicating glitches and downtimes with Logpoint."

More Logpoint cons

"Lacks a mobile application."

"InsightIDR's integration with other solutions could be improved. Also, I'd like more control from the portal over what's happening on the endpoint side. For example, when I see an attack on an endpoint, I want to be able to stop it from the portal."

"I feel it would greatly benefit from more supported log sources."

"It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required."

"Tenable Nessus is easier to deal with. It's more efficient and accurate. InsightIDR is heavier than Tenable in terms of performance and scanning. Rapid7 would be much easier to use if it had a network connector like Tenable. Tenable's connector allows continuous monitoring over the B caps."

"InsightIDR is only available in a cloud version. Some of our customers prefer an on-prem solution because they want to manage the security within their environment."

"I'd like to see a mobile application included and some feature related to the generality of segregation for internal users that access the application."

"Cloud risk assessment is one area where I think they need a lot of improvement."

More Rapid7 InsightIDR cons

Pricing and Cost Advice

"Cortex XDR by Palo Alto Networks is quite an expensive solution."

"Our license will require renewal in August, after which the maintenance will continue as usual."

"Cortex XDR by Palo Alto Networks is an expensive solution."

"I don't have any issues with the pricing. We are satisfied with the price."

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."

"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."

"Cortex XDR’s pricing is very reasonable."

"I don't recall what the cost was, but it wasn't really that expensive."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"LogPoint seemed like it was a good product, but it was expensive and there wasn't any room to move the pricing when customers needed a lower-costing solution."

"It was on a yearly basis at about $100K. It was not a huge environment. We were running it on our own virtual server environment, which, of course, had a cost. There was hardware and some energy cost, and then there were Microsoft Windows licenses for servers. That's all, but there was nothing in comparison to the licensing costs."

"Logpoint's pricing is mid-ranged and depends on the number of devices."

"It's getting more expensive, which is one of the reasons we're looking around just to see if there's anything better value."

"It has a fixed price, which is what I like about LogPoint. I bought the system and paid for it, and I pay maintenance. It is not a consumption model. Most SIEMs or most of the log management systems are consumption-based, which means that you pay for how many logs you have in the system. That's a real problem because logs can grow very quickly in different circumstances, and when you have a variable price model, you never know what you're going to pay. Splunk is notoriously expensive for that reason. If you use Splunk or QRadar, it becomes expensive because there are not just the logs; you also have to parse the logs and create indexes. Those indexes can be very expensive in terms of space. Therefore, if they charge you by this space, you can end up paying a significant amount of money. It can be more than what you expect to pay. I like the fact that LogPoint has a fixed cost. I know what I'm going to pay on a yearly basis. I pay that, and I pay the maintenance, and I just make it work."

"On a scale of one to ten, where one is cheap, and ten is expensive, I would rate LogPoint's pricing a seven. It is not very expensive compared to some of the more costly products, and it is not very cheap compared to some of the cheaper products in the SIEM market."

"For a hundred user deployment the cost is about $10,000. The next year it would be the same because it's a subscription-based license. There are separate costs as well, for example, if a customer asks for training for their staff."

"Our licensing fees are about $10,000 USD per month, which I think is fair."

More Logpoint pricing and cost advice

"The pricing of the solution depends on the user. But there is a yearly licensing cost."

"It is a reasonably priced solution."

"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."

"Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs."

"The solution has a mid-range price point in the market"

"Rapid7 InsightIDR charges us based on the endpoints we connect to."

"It is more reasonably priced than other vendors."

"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help."

More Rapid7 InsightIDR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

896,467 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Construction Company

11%

Comms Service Provider

Manufacturing Company

Computer Software Company

14%

Construction Company

12%

Manufacturing Company

10%

Comms Service Provider

10%

Financial Services Firm

Manufacturing Company

Computer Software Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	47
Midsize Enterprise	20
Large Enterprise	51

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	3
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	21
Midsize Enterprise	5
Large Enterprise	6

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for LogPoint?

I rate the pricing at eight, suggesting it's relatively good or affordable.

See all answers

What needs improvement with LogPoint?

I selected Logpoint for the pricing as it is reasonable. I am located in Bangladesh, South Asia, Dhaka. I have tried ...

See all answers

What is your primary use case for LogPoint?

I had experience with Logpoint before, and I contacted the Exabeam solution, but there was no response; they did not ...

See all answers

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is a...

See all answers

What is your experience regarding pricing and costs for Rapid7 InsightIDR?

The product pricing is very cheap.

See all answers

What needs improvement with Rapid7 InsightIDR?

If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as ...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 10% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

IBM Security QRadar vs Logpoint

Compared 9% of the time

Splunk Enterprise Security vs Logpoint

Compared 8% of the time

Elastic Security vs Logpoint

Compared 5% of the time

Wazuh vs Logpoint

Compared 3% of the time

Dynatrace vs Logpoint

Compared 2% of the time

More Logpoint Competitors

Microsoft Sentinel vs Rapid7 InsightIDR

Compared 4% of the time

Splunk Enterprise Security vs Rapid7 InsightIDR

Compared 4% of the time

Vectra AI vs Rapid7 InsightIDR

Compared 3% of the time

Adlumin Security Operations vs Rapid7 InsightIDR

Compared 3% of the time

IBM Security QRadar vs Rapid7 InsightIDR

Compared 3% of the time

More Rapid7 InsightIDR Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

May 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Logpoint

May 2026

Download Logpoint product report

Buyer's Guide

Rapid7 InsightIDR

May 2026

Download Rapid7 InsightIDR product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

InsightIDR

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Logpoint offers a robust SIEM system tailored for compliance with regulations like PCI DSS and GDPR, enhancing security monitoring and enabling efficient incident response.

Logpoint strengthens cybersecurity by offering essential tools for log collection, security monitoring, and forensic analysis. Its features include an intuitive dashboard, a powerful correlation engine, and extensive third-party integrations, making it a versatile asset for security operations centers. Despite its advantages, areas for improvement include ransomware protection, cloud-native deployment, and more flexible pricing. Improvements in features like SOAR and UEBA functionality can boost its competitiveness.

What are the most important features of Logpoint?

Easy-to-use dashboard: Simplifies interaction with intuitive design.
Correlation engine: Connects data for in-depth security insights.
Comprehensive log collection: Facilitates extensive data gathering.
Third-party integrations: Connects seamlessly with other tools.
UEBA and SOAR components: Enhance threat response and automation.

What benefits and ROI should users consider?

Cost-effectiveness: Provides significant value for its pricing.
User-friendly interface: Enhances usability with straightforward design.
Compliance navigation: Eases PCI DSS and GDPR compliance.
Quick support service: Provides responsive customer assistance.

Many organizations utilize Logpoint across industries as part of their security infrastructure. It supports standard compliance, orchestrating incident responses and security threat monitoring. Logpoint empowers businesses by integrating and correlating security data, improving cybersecurity posture in varied environments.

Logpoint

Rapid7 InsightIDR is a cloud-based security information and event management solution known for its user behavior analytics, offering rapid detection and response capabilities while facilitating seamless integration across systems.

Rapid7 InsightIDR is designed to enhance threat detection and investigation through its efficient user behavior analytics and advanced threat intelligence framework. The platform's cloud-based deployment ensures rapid setup and comprehensive event monitoring across diverse IT environments, including endpoints and Office 365. Its intuitive interface supports seamless data collection, honing in on threat detection through honeypot utilization and intelligent alerting. However, it is noted for lacking some customization features and better integration, especially with Microsoft and ITSMs.

What are the key features of Rapid7 InsightIDR?

User Behavior Analytics: Detects threats by analyzing patterns and anomalies.
Cloud Deployment: Enables quick setup and scalability.
Comprehensive Monitoring: Monitors events across systems and platforms like Office 365.
Honeypots and Alerting: Utilizes honeypots to reduce false positives and alert fatigue.
Threat Intelligence Framework: Supports effective threat hunting and remediation.

What benefits should users consider in reviews when evaluating Rapid7 InsightIDR?

Enhanced Detection: Improves threat detection with user behavior analysis.
Easy Integration: Integrates across systems for a streamlined security approach.
Rapid Response: Facilitates quick action against identified threats.
Operational Efficiency: Offers a cohesive view of security operations.

Rapid7 InsightIDR is prominently used in security operation centers to manage events, detect threats, and respond effectively. Industries apply it for network behavior monitoring, compliance, and vulnerability management. Companies integrate it with security tools to boost threat investigation, ensuring full SIEM functionalities and robust log management capacities. Its application spans behavioral and intrusion analytics, aiding in monitoring and addressing malicious activities.

Rapid7

Sample Customers

CBI Health Group, University Honda, VakifBank

AP Pension, Copenhagen Airports, KMD, Terma, DISA, Danish Crown, Durham City Council, Game, TopDanmark, Lahti Energia, Energi Midt, Synoptik, Eissmann Group Automotive, Aligro, CG50...

Liberty Wines, Pioneer Telephone, Visier

Buyer's Guide

Logpoint vs. Rapid7 InsightIDR

May 2026

Free Report: Logpoint vs. Rapid7 InsightIDR

Find out what your peers are saying about Logpoint vs. Rapid7 InsightIDR and other solutions. Updated: May 2026.

DOWNLOAD NOW

896,467 professionals have used our research since 2012.

See our Logpoint vs. Rapid7 InsightIDR report.

See our list of best Security Information and Event Management (SIEM) vendors, best User Entity Behavior Analytics (UEBA) vendors, and best Endpoint Detection and Response (EDR) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.