Logpoint vs Rapid7 InsightIDR comparison

Why PeerSpot?

Logpoint and Rapid7 are both solutions in the Security Information and Event Management (SIEM) category. Logpoint is ranked #30 with an average rating of 8.3, while Rapid7 is ranked #23 with an average rating of 7.5. Additionally, 86% of Logpoint users are willing to recommend the solution, compared to 96% of Rapid7 users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Logpoint and Rapid7 InsightIDR are both robust security information and event management (SIEM) solutions. Rapid7 InsightIDR is favored due to its comprehensive features and value despite higher costs compared to Logpoint.

Features: Logpoint is known for its ease of use, efficient log management, and security analytics capabilities. Rapid7 InsightIDR offers advanced threat detection, investigation, and response features. Users highlight InsightIDR's asset prioritization and automated response workflows as particularly valuable.

Room for Improvement: Users suggest Logpoint improve its integration with third-party tools, its alerting system, and reporting functionalities. Rapid7 InsightIDR users indicate the need for enhancements in reporting functionalities, reduction of false positives, and improvements in usability to counter initial complexity.

Ease of Deployment and Customer Service: Logpoint users report a straightforward deployment process and satisfactory customer service. Rapid7 InsightIDR also receives positive feedback on ease of deployment, though some users mention a steep learning curve. Both products provide reliable customer service, but Logpoint's simpler deployment process is more appealing for customers with limited IT resources.

Pricing and ROI: Logpoint users find the pricing competitive and the return on investment satisfactory. Rapid7 InsightIDR, while more expensive, is considered worth the investment due to its superior features and capabilities. Users note that despite higher costs, InsightIDR offers a better ROI through enhanced security and efficiency.

To learn more, read our detailed Logpoint vs. Rapid7 InsightIDR Report (Updated: September 2026).

Buyer's Guide

Logpoint vs. Rapid7 InsightIDR

September 2026

Download the complete report

Helped 914,322 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Rifat Hasan

System Engineer at Corporate Projukti Limited

Has lacked proper integration and consistent support communication

I selected Logpoint for the pricing as it is reasonable. I am located in Bangladesh, South Asia, Dhaka. I have tried to contact Exabeam by mail repeatedly, but there has been no response. My company, Corporate Projukti Limited, including my Bangladesh area head, technical director, and team manager, have sent emails to contact Exabeam solution, but there is no response. There is already a distributor in Bangladesh. The weakness with Logpoint is UEBA. UEBA is recommended, but not extra. Exabeam's UEBA is an extra feature. SOAR is extra, but Logpoint's product measurement is 40 or 50. There is a 10% difference with the UEBA and SOAR, so Logpoint is weak there. I would appreciate extra features in Logpoint such as SOAR. SOAR and UEBA are included features in Logpoint. Logpoint's UEBA is a weak point, while Exabeam's UEBA has extra AI through automation. Exabeam has a license included, and the extra license is an add-on. In Logpoint, it is included, which makes it a weak point.

Read full review

Prajwal Chougale

SOC L2 Analyst at a tech services company with 51-200 employees

Centralized threat hunting has improved alert accuracy and simplifies incident investigations

I would say there are two areas for improvement: the reporting dashboard that provides insights or reports weekly or monthly lacks detailed information about how logs are being ingested. While the details are there, they could be more concise and easier to understand for any level of authority. The second area is alert tuning; compared to Microsoft Sentinel, Rapid7 InsightIDR provides fewer alerts with more static alert functionality and lacks dynamic alerting exposures. There could be improvements to learn from past alert activities for more dynamic alert configurations. These two areas are the main areas for improvement; everything else is good.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Monitoring is most valuable."

"WildFire AI is the best option for this product."

"Stability is one of the features we like the most."

"The tool is designed to scale for large enterprises and handle large volumes of data."

"I generally believe that Cortex XDR by Palo Alto Networks is probably the best in the market right now."

"The stability of this product is very good."

"They have a new GUI which is just fantastic."

"If the user leaves our premises or network, Palo Alto Traps will still be on that endpoint and will still apply our policies."

More Cortex XDR by Palo Alto Networks pros

"What I like best about LogPoint is its cost-effectiveness compared to other solutions. LogPoint also has better dashboards which I find valuable. I also like that you can create use cases based on your assets."

"The integration is very user-friendly. There are not many CLI commands. Everything is directly accessible from the web interface."

"The most beneficial was being able to prove, with proper reports, that from a compliance perspective, the company is in control. The service part of LogPoint did modifications or did some additional work to have the proper reports defined."

"The most valuable feature, which is endpoint security, is included in Logpoint, and an extra feature is the integration."

"It is an AI technology because it is using machine learning technology. So far, there is nothing better out there for UEBA in terms of monitoring endpoints and user activity. It is using machine learning language, so it is right at the top. It provides that capability and monitors all the activities. It devises a baseline and monitors if there is any deviation from the baseline."

"It is a good cost proposition, and it works extremely well and very fast."

"The flexibility of the search feature and the solution's analytics features are the most valuable parts of the solution, and it's also very user-friendly."

"I use the product for my research and development to enhance my work."

More Logpoint pros

"The alerting to drive investigations and remediation has been its most valuable feature, plus the ability to quickly search multiple logs makes investigations easier."

"Intelligent alerting to avoid the common problem of alert fatigue associated with traditional SIEMs."

"The solution is very intuitive, it's easy to set up, is absolutely stable, and has a lot of integration with other security products."

"Dashboards, including the main screen, provide much-needed information at a glance, without hours of coding and sifting through logs to find it. In case of an actual security incident, I have faith that insightIDR has retained all logs in a secure manner that prevents log tampering as well."

"Rapid7's reporting is more robust than Tenable's."

"Rapid7 is easy to use and deploy. It is a simple solution and has easy data pulling."

"User behavioral analytics allows us to pinpoint abnormal or suspicious behavior among millions of events every day."

"The incident case management is the most valuable feature. Even though there's always something I find I would like to add to that feature, the ability to quickly sort through all the logs, network and endpoint data, etc., and add it to an incident case as part of the investigation, is nice. Having it automatically timeline that additional data into the original incident timeline, and correlate it to other notable events and activities on the network, results in a huge improvement in our overall confidence that we've quickly traced down the right source of an issue."

More Rapid7 InsightIDR pros

Cons

"This product has not improved my organization - in fact, we are in the process of moving back to another product as a result of Cortex's horrible impact on system performance."

"The onboarding process could be better."

"The solution lags to the real-time scenarios here and there."

"The main issue I could point out is the offline agents and the way that it is missing."

"Being able to filter the events to see those that are related to the actual alert would save time spent by the engineer."

"They have the worst support, as a company, that I have ever worked with, as they are difficult to get a hold of and keep on the phone. They don't know what they are talking about when you get them on the phone. They don't like to respond to messages when you send them to them. They like to "research problems" for weeks on end, then pass you off to somebody else."

"The price could be a little lower."

"It's more focused on network communication. If a customer wants to increase the level of protection and start working with documents, it's impossible to integrate these features into the system. It's more of a communication-oriented system than a content security-oriented system."

More Cortex XDR by Palo Alto Networks cons

"The general public wasn't looking for that type of product unless you had a company that was medical or financial and needed 24-hour responsiveness."

"What could be improved in LogPoint is its UI because it's less friendly to users than LogRhythm. The UI could be more aesthetically appealing to users. It's completely outdated."

"One of the downsides is it is not a SaaS solution. It must be on-premises."

"Dashboards could be developed further."

"One of the things we faced last year was that we had some memory issues with the server running. We were running them as virtual services, and we were facing some performance issues. Back then, there were some things that had already been solved at the end, but one of the small issues we had was that it was quite memory-consuming. After one upgrade that we did, we faced some performance issues."

"It needs to improve performance. That's somehow something that others do better."

"Logpoint's UEBA is a weak point, while Exabeam's UEBA has extra AI through automation."

"LogPoint can improve its dashboards. We are not able to customize the dashboard when creating them. They only have preset dashboards which do not have exactly what we are looking for."

More Logpoint cons

"Needs a better ability to customize the check within the console."

"The main problem lies in the processes within the client's operating systems."

"I would like to see more development in InsightIDR towards building their SIEM solution and converting it to XDR."

"Personally, I feel it would greatly benefit from more supported log sources."

"One of the things that could be better is digital forensics. It is there, but it can be better. They could provide more on the endpoint detection level."

"Cloud risk assessment is one area where I think they need a lot of improvement."

"Rapid7 doesn't integrate well with all our security tools from various vendors, so we plan to switch. Many of our solutions work with Rapid7, but some do not. We are already searching for a replacement already."

"One thing that springs to mind is easier API integration with ITSMs."

More Rapid7 InsightIDR cons

Pricing and Cost Advice

"The pricing is okay, although direct support can be expensive."

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."

"Compared to CrowdStrike, Cortex XDR is an expensive solution."

"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."

"Cortex XDR's pricing is ok."

"I don't like that they have different types of licenses."

"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."

"Cortex XDR’s pricing is very reasonable."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"Logpoint's pricing is mid-ranged and depends on the number of devices."

"On a scale of one to ten, where one is cheap, and ten is expensive, I would rate LogPoint's pricing a seven. It is not very expensive compared to some of the more costly products, and it is not very cheap compared to some of the cheaper products in the SIEM market."

"Our licensing fees are about $10,000 USD per month, which I think is fair."

"My company used to pay for LogPoint costs annually. It's a cost-effective solution. I'm not part of the Finance team, though, so I'm not sure exactly what the licensing fee is or what license my company had."

"It has a fixed price, which is what I like about LogPoint. I bought the system and paid for it, and I pay maintenance. It is not a consumption model. Most SIEMs or most of the log management systems are consumption-based, which means that you pay for how many logs you have in the system. That's a real problem because logs can grow very quickly in different circumstances, and when you have a variable price model, you never know what you're going to pay. Splunk is notoriously expensive for that reason. If you use Splunk or QRadar, it becomes expensive because there are not just the logs; you also have to parse the logs and create indexes. Those indexes can be very expensive in terms of space. Therefore, if they charge you by this space, you can end up paying a significant amount of money. It can be more than what you expect to pay. I like the fact that LogPoint has a fixed cost. I know what I'm going to pay on a yearly basis. I pay that, and I pay the maintenance, and I just make it work."

"For a hundred user deployment the cost is about $10,000. The next year it would be the same because it's a subscription-based license. There are separate costs as well, for example, if a customer asks for training for their staff."

"LogPoint seemed like it was a good product, but it was expensive and there wasn't any room to move the pricing when customers needed a lower-costing solution."

"It's less expensive than the competitors. The Logpoint marketing team is very accommodating and client-friendly. They offer very good reductions in price. They are pretty good in this aspect. They are transparent in their licensing and pricing."

More Logpoint pricing and cost advice

"The pricing and licensing are competitive."

"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."

"Rapid7 InsightIDR charges us based on the endpoints we connect to."

"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help."

"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."

"It is more reasonably priced than other vendors."

"I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability."

"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."

More Rapid7 InsightIDR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

914,322 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

12%

Comms Service Provider

12%

Construction Company

11%

Manufacturing Company

Construction Company

14%

Outsourcing Company

11%

Manufacturing Company

11%

Comms Service Provider

10%

Financial Services Firm

Manufacturing Company

Comms Service Provider

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	47
Midsize Enterprise	21
Large Enterprise	55

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	3
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	22
Midsize Enterprise	5
Large Enterprise	6

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for LogPoint?

I rate the pricing at eight, suggesting it's relatively good or affordable.

See all answers

What needs improvement with LogPoint?

I selected Logpoint for the pricing as it is reasonable. I am located in Bangladesh, South Asia, Dhaka. I have tried ...

See all answers

What is your primary use case for LogPoint?

I had experience with Logpoint before, and I contacted the Exabeam solution, but there was no response; they did not ...

See all answers

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is a...

See all answers

What is your experience regarding pricing and costs for Rapid7 InsightIDR?

My experience with pricing, setup costs, and licensing has been very positive; it is cost-effective and offers great ...

See all answers

What needs improvement with Rapid7 InsightIDR?

I would say there are two areas for improvement: the reporting dashboard that provides insights or reports weekly or ...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 14% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

IBM Security QRadar vs Logpoint

Compared 8% of the time

Splunk Enterprise Security vs Logpoint

Compared 6% of the time

Elastic Security vs Logpoint

Compared 5% of the time

Graylog Security vs Logpoint

Compared 3% of the time

Huntress Managed EDR vs Logpoint

Compared 1% of the time

More Logpoint Competitors

Splunk Enterprise Security vs Rapid7 InsightIDR

Compared 4% of the time

Microsoft Sentinel vs Rapid7 InsightIDR

Compared 4% of the time

Adlumin Security Operations vs Rapid7 InsightIDR

Compared 3% of the time

Vectra AI vs Rapid7 InsightIDR

Compared 3% of the time

Darktrace vs Rapid7 InsightIDR

Compared 3% of the time

More Rapid7 InsightIDR Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

September 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Logpoint

September 2026

Download Logpoint product report

Buyer's Guide

Rapid7 InsightIDR

September 2026

Download Rapid7 InsightIDR product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

InsightIDR

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Logpoint offers a robust SIEM system tailored for compliance with regulations like PCI DSS and GDPR, enhancing security monitoring and enabling efficient incident response.

Logpoint strengthens cybersecurity by offering essential tools for log collection, security monitoring, and forensic analysis. Its features include an intuitive dashboard, a powerful correlation engine, and extensive third-party integrations, making it a versatile asset for security operations centers. Despite its advantages, areas for improvement include ransomware protection, cloud-native deployment, and more flexible pricing. Improvements in features like SOAR and UEBA functionality can boost its competitiveness.

What are the most important features of Logpoint?

Easy-to-use dashboard: Simplifies interaction with intuitive design.
Correlation engine: Connects data for in-depth security insights.
Comprehensive log collection: Facilitates extensive data gathering.
Third-party integrations: Connects seamlessly with other tools.
UEBA and SOAR components: Enhance threat response and automation.

What benefits and ROI should users consider?

Cost-effectiveness: Provides significant value for its pricing.
User-friendly interface: Enhances usability with straightforward design.
Compliance navigation: Eases PCI DSS and GDPR compliance.
Quick support service: Provides responsive customer assistance.

Many organizations utilize Logpoint across industries as part of their security infrastructure. It supports standard compliance, orchestrating incident responses and security threat monitoring. Logpoint empowers businesses by integrating and correlating security data, improving cybersecurity posture in varied environments.

Logpoint

Rapid7 InsightIDR is a cloud-based security information and event management solution known for its user behavior analytics, offering rapid detection and response capabilities while facilitating seamless integration across systems.

Rapid7 InsightIDR is designed to enhance threat detection and investigation through its efficient user behavior analytics and advanced threat intelligence framework. The platform's cloud-based deployment ensures rapid setup and comprehensive event monitoring across diverse IT environments, including endpoints and Office 365. Its intuitive interface supports seamless data collection, honing in on threat detection through honeypot utilization and intelligent alerting. However, it is noted for lacking some customization features and better integration, especially with Microsoft and ITSMs.

What are the key features of Rapid7 InsightIDR?

User Behavior Analytics: Detects threats by analyzing patterns and anomalies.
Cloud Deployment: Enables quick setup and scalability.
Comprehensive Monitoring: Monitors events across systems and platforms like Office 365.
Honeypots and Alerting: Utilizes honeypots to reduce false positives and alert fatigue.
Threat Intelligence Framework: Supports effective threat hunting and remediation.

What benefits should users consider in reviews when evaluating Rapid7 InsightIDR?

Enhanced Detection: Improves threat detection with user behavior analysis.
Easy Integration: Integrates across systems for a streamlined security approach.
Rapid Response: Facilitates quick action against identified threats.
Operational Efficiency: Offers a cohesive view of security operations.

Rapid7 InsightIDR is prominently used in security operation centers to manage events, detect threats, and respond effectively. Industries apply it for network behavior monitoring, compliance, and vulnerability management. Companies integrate it with security tools to boost threat investigation, ensuring full SIEM functionalities and robust log management capacities. Its application spans behavioral and intrusion analytics, aiding in monitoring and addressing malicious activities.

Rapid7

Sample Customers

CBI Health Group, University Honda, VakifBank

AP Pension, Copenhagen Airports, KMD, Terma, DISA, Danish Crown, Durham City Council, Game, TopDanmark, Lahti Energia, Energi Midt, Synoptik, Eissmann Group Automotive, Aligro, CG50...

Liberty Wines, Pioneer Telephone, Visier

Buyer's Guide

Logpoint vs. Rapid7 InsightIDR

September 2026

Free Report: Logpoint vs. Rapid7 InsightIDR

Find out what your peers are saying about Logpoint vs. Rapid7 InsightIDR and other solutions. Updated: September 2026.

DOWNLOAD NOW

914,322 professionals have used our research since 2012.

See our Logpoint vs. Rapid7 InsightIDR report.

See our list of best Security Information and Event Management (SIEM) vendors, best User Entity Behavior Analytics (UEBA) vendors, and best Endpoint Detection and Response (EDR) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.