Logpoint vs Rapid7 InsightIDR comparison

Why PeerSpot?

Logpoint and Rapid7 are both solutions in the Security Information and Event Management (SIEM) category. Logpoint is ranked #29 with an average rating of 8.3, while Rapid7 is ranked #23 with an average rating of 7.5. Additionally, 86% of Logpoint users are willing to recommend the solution, compared to 96% of Rapid7 users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Logpoint and Rapid7 InsightIDR are both robust security information and event management (SIEM) solutions. Rapid7 InsightIDR is favored due to its comprehensive features and value despite higher costs compared to Logpoint.

Features: Logpoint is known for its ease of use, efficient log management, and security analytics capabilities. Rapid7 InsightIDR offers advanced threat detection, investigation, and response features. Users highlight InsightIDR's asset prioritization and automated response workflows as particularly valuable.

Room for Improvement: Users suggest Logpoint improve its integration with third-party tools, its alerting system, and reporting functionalities. Rapid7 InsightIDR users indicate the need for enhancements in reporting functionalities, reduction of false positives, and improvements in usability to counter initial complexity.

Ease of Deployment and Customer Service: Logpoint users report a straightforward deployment process and satisfactory customer service. Rapid7 InsightIDR also receives positive feedback on ease of deployment, though some users mention a steep learning curve. Both products provide reliable customer service, but Logpoint's simpler deployment process is more appealing for customers with limited IT resources.

Pricing and ROI: Logpoint users find the pricing competitive and the return on investment satisfactory. Rapid7 InsightIDR, while more expensive, is considered worth the investment due to its superior features and capabilities. Users note that despite higher costs, InsightIDR offers a better ROI through enhanced security and efficiency.

To learn more, read our detailed Logpoint vs. Rapid7 InsightIDR Report (Updated: September 2026).

Buyer's Guide

Logpoint vs. Rapid7 InsightIDR

September 2026

Download the complete report

Helped 915,287 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Rifat Hasan

System Engineer at Corporate Projukti Limited

Has lacked proper integration and consistent support communication

I selected Logpoint for the pricing as it is reasonable. I am located in Bangladesh, South Asia, Dhaka. I have tried to contact Exabeam by mail repeatedly, but there has been no response. My company, Corporate Projukti Limited, including my Bangladesh area head, technical director, and team manager, have sent emails to contact Exabeam solution, but there is no response. There is already a distributor in Bangladesh. The weakness with Logpoint is UEBA. UEBA is recommended, but not extra. Exabeam's UEBA is an extra feature. SOAR is extra, but Logpoint's product measurement is 40 or 50. There is a 10% difference with the UEBA and SOAR, so Logpoint is weak there. I would appreciate extra features in Logpoint such as SOAR. SOAR and UEBA are included features in Logpoint. Logpoint's UEBA is a weak point, while Exabeam's UEBA has extra AI through automation. Exabeam has a license included, and the extra license is an add-on. In Logpoint, it is included, which makes it a weak point.

Read full review

Prajwal Chougale

SOC L2 Analyst at a tech services company with 51-200 employees

Centralized threat hunting has improved alert accuracy and simplifies incident investigations

I would say there are two areas for improvement: the reporting dashboard that provides insights or reports weekly or monthly lacks detailed information about how logs are being ingested. While the details are there, they could be more concise and easier to understand for any level of authority. The second area is alert tuning; compared to Microsoft Sentinel, Rapid7 InsightIDR provides fewer alerts with more static alert functionality and lacks dynamic alerting exposures. There could be improvements to learn from past alert activities for more dynamic alert configurations. These two areas are the main areas for improvement; everything else is good.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"When the pandemic started, Palo Alto came up with many solutions, which helped with the quick shift from on-premises to the cloud."

"The solution doesn't need a high level of technical training."

"Being a cloud solution it is very flexible in serving internal and external connections and a broad range of devices."

"Palo Alto is the core of the security infrastructure in the environment."

"Cortex is a very good total solution on the endpoints."

"The anti-exploit is impenetrable."

"The stability is pretty good except for one or two cases, and based on the performance, it's been okay with pretty high performance, no bugs or glitches, and it doesn't crash or freeze."

"I generally believe that Cortex XDR by Palo Alto Networks is probably the best in the market right now."

More Cortex XDR by Palo Alto Networks pros

"The main advantage of Logpoint is the support service. They reply within ten minutes to an hour to our queries."

"It is an AI technology because it is using machine learning technology. So far, there is nothing better out there for UEBA in terms of monitoring endpoints and user activity. It is using machine learning language, so it is right at the top. It provides that capability and monitors all the activities. It devises a baseline and monitors if there is any deviation from the baseline."

"The solution offers excellent reporting features, and our customers have been satisfied that they have been able to meet their compliance needs by giving them a standard report."

"Technical support is responsive and very friendly."

"In my experience with medium-sized operations, LogPoint's scalability is excellent, so I would rate it a ten out of ten."

"They basically charge you in a better way."

"The most valuable feature, which is endpoint security, is included in Logpoint, and an extra feature is the integration."

"It is a good cost proposition, and it works extremely well and very fast."

More Logpoint pros

"They can subscribe to Rapid7 because it is more valuable and delivers a greater return on investment."

"I've used other products such as QRadar and other SIEM solutions and I find this solution is much more simplified and user-friendly."

"Rapid7 is easy to use and deploy. It is a simple solution and has easy data pulling."

"The ability to ingest Office 365 log files, then process them into events and display them on a map."

"The log aggregation and storage provided by InsightIDR has shown no issues with scalability; aggregating over one hundred millions events daily."

"User behavioral analytics allows us to pinpoint abnormal or suspicious behavior among millions of events every day."

"Dashboards, including the main screen, provide much-needed information at a glance, without hours of coding and sifting through logs to find it. In case of an actual security incident, I have faith that insightIDR has retained all logs in a secure manner that prevents log tampering as well."

"Rapid7's reporting is more robust than Tenable's."

More Rapid7 InsightIDR pros

Cons

"The product's pricing needs improvement. They could provide more discounts. Additionally, the dashboard and control panel could be enhanced."

"In general, the price could be more competitive."

"Cortex XDR by Palo Alto Networks is a strong tool, but it is true that digesting information sometimes makes the tool go a little bit slower."

"I would like to see improvement in the tool's user interface, particularly in the area of managing alerts and providing more reporting capabilities."

"Product might have some bugs."

"Currently, we are monitoring all USB drives and ports but we would like to improve our device control capabilities."

"If they had pulse rate detection, it would be better."

"Limited remote connection."

More Cortex XDR by Palo Alto Networks cons

"LogPoint must find a way to integrate the servers without agents."

"Logpoint is not flexible. Its documentation is not user-friendly."

"It needs to improve performance. That's somehow something that others do better."

"Customer Service: This is a HUGE problem."

"One of the downsides is it is not a SaaS solution. It must be on-premises."

"The general public wasn't looking for that type of product unless you had a company that was medical or financial and needed 24-hour responsiveness."

"The documentation part is something that needs to be improved, as well as the threat intelligence investigation part."

"My issues with the product are mainly with regard to how it handles collecting logs."

More Logpoint cons

"There is a future in AI with Rapid7, however, it is not fully operated. There are certain limitations with Rapid7 that I am working on."

"One of the things that could be better is digital forensics. It is there, but it can be better. They could provide more on the endpoint detection level."

"Tenable Nessus is easier to deal with. It's more efficient and accurate. InsightIDR is heavier than Tenable in terms of performance and scanning. Rapid7 would be much easier to use if it had a network connector like Tenable. Tenable's connector allows continuous monitoring over the B caps."

"The interface for doing investigation needs to be enhanced with minor improvements that would make it more useful."

"The solution needs improvement in threat intelligence. Increasing the depth of intelligence to help users understand more about threats is a possibility. My suggestion is to expand access to other websites or resources."

"The APIs can be further improved in Rapid7."

"I'd like to see a mobile application included and some feature related to the generality of segregation for internal users that access the application."

"They should add more configuration and security features to it."

More Rapid7 InsightIDR cons

Pricing and Cost Advice

"I feel it is fairly priced."

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."

"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."

"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."

"It has reasonable pricing for the use cases it provides to the company."

"It's about $55 per license on a yearly basis."

"Very costly product."

"I don't have any issues with the pricing. We are satisfied with the price."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"My company used to pay for LogPoint costs annually. It's a cost-effective solution. I'm not part of the Finance team, though, so I'm not sure exactly what the licensing fee is or what license my company had."

"It's getting more expensive, which is one of the reasons we're looking around just to see if there's anything better value."

"For a hundred user deployment the cost is about $10,000. The next year it would be the same because it's a subscription-based license. There are separate costs as well, for example, if a customer asks for training for their staff."

"Our licensing fees are about $10,000 USD per month, which I think is fair."

"LogPoint seemed like it was a good product, but it was expensive and there wasn't any room to move the pricing when customers needed a lower-costing solution."

"It has a fixed price, which is what I like about LogPoint. I bought the system and paid for it, and I pay maintenance. It is not a consumption model. Most SIEMs or most of the log management systems are consumption-based, which means that you pay for how many logs you have in the system. That's a real problem because logs can grow very quickly in different circumstances, and when you have a variable price model, you never know what you're going to pay. Splunk is notoriously expensive for that reason. If you use Splunk or QRadar, it becomes expensive because there are not just the logs; you also have to parse the logs and create indexes. Those indexes can be very expensive in terms of space. Therefore, if they charge you by this space, you can end up paying a significant amount of money. It can be more than what you expect to pay. I like the fact that LogPoint has a fixed cost. I know what I'm going to pay on a yearly basis. I pay that, and I pay the maintenance, and I just make it work."

"It's less expensive than the competitors. The Logpoint marketing team is very accommodating and client-friendly. They offer very good reductions in price. They are pretty good in this aspect. They are transparent in their licensing and pricing."

"It was on a yearly basis at about $100K. It was not a huge environment. We were running it on our own virtual server environment, which, of course, had a cost. There was hardware and some energy cost, and then there were Microsoft Windows licenses for servers. That's all, but there was nothing in comparison to the licensing costs."

More Logpoint pricing and cost advice

"Accurately predict your licensing counts as this is a subscription based product."

"Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs."

"The pricing and licensing are competitive."

"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."

"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."

"I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability."

"Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."

"Rapid7 InsightIDR is priced very well and is cost-effective."

More Rapid7 InsightIDR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

915,287 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

12%

Comms Service Provider

12%

Construction Company

11%

Manufacturing Company

10%

Construction Company

14%

Manufacturing Company

12%

Outsourcing Company

11%

Comms Service Provider

10%

Manufacturing Company

10%

Financial Services Firm

Comms Service Provider

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	47
Midsize Enterprise	21
Large Enterprise	55

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	3
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	22
Midsize Enterprise	5
Large Enterprise	6

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for LogPoint?

I rate the pricing at eight, suggesting it's relatively good or affordable.

See all answers

What needs improvement with LogPoint?

I selected Logpoint for the pricing as it is reasonable. I am located in Bangladesh, South Asia, Dhaka. I have tried ...

See all answers

What is your primary use case for LogPoint?

I had experience with Logpoint before, and I contacted the Exabeam solution, but there was no response; they did not ...

See all answers

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is a...

See all answers

What is your experience regarding pricing and costs for Rapid7 InsightIDR?

My experience with pricing, setup costs, and licensing has been very positive; it is cost-effective and offers great ...

See all answers

What needs improvement with Rapid7 InsightIDR?

I would say there are two areas for improvement: the reporting dashboard that provides insights or reports weekly or ...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 15% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

IBM Security QRadar vs Logpoint

Compared 8% of the time

Splunk Enterprise Security vs Logpoint

Compared 6% of the time

Elastic Security vs Logpoint

Compared 5% of the time

LevelBlue USM Anywhere vs Logpoint

Compared 3% of the time

Huntress Managed EDR vs Logpoint

Compared 1% of the time

More Logpoint Competitors

Splunk Enterprise Security vs Rapid7 InsightIDR

Compared 4% of the time

Microsoft Sentinel vs Rapid7 InsightIDR

Compared 4% of the time

Adlumin Security Operations vs Rapid7 InsightIDR

Compared 3% of the time

Vectra AI vs Rapid7 InsightIDR

Compared 3% of the time

Darktrace vs Rapid7 InsightIDR

Compared 3% of the time

More Rapid7 InsightIDR Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

September 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Logpoint

September 2026

Download Logpoint product report

Buyer's Guide

Rapid7 InsightIDR

September 2026

Download Rapid7 InsightIDR product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

InsightIDR

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Logpoint offers a robust SIEM system tailored for compliance with regulations like PCI DSS and GDPR, enhancing security monitoring and enabling efficient incident response.

Logpoint strengthens cybersecurity by offering essential tools for log collection, security monitoring, and forensic analysis. Its features include an intuitive dashboard, a powerful correlation engine, and extensive third-party integrations, making it a versatile asset for security operations centers. Despite its advantages, areas for improvement include ransomware protection, cloud-native deployment, and more flexible pricing. Improvements in features like SOAR and UEBA functionality can boost its competitiveness.

What are the most important features of Logpoint?

Easy-to-use dashboard: Simplifies interaction with intuitive design.
Correlation engine: Connects data for in-depth security insights.
Comprehensive log collection: Facilitates extensive data gathering.
Third-party integrations: Connects seamlessly with other tools.
UEBA and SOAR components: Enhance threat response and automation.

What benefits and ROI should users consider?

Cost-effectiveness: Provides significant value for its pricing.
User-friendly interface: Enhances usability with straightforward design.
Compliance navigation: Eases PCI DSS and GDPR compliance.
Quick support service: Provides responsive customer assistance.

Many organizations utilize Logpoint across industries as part of their security infrastructure. It supports standard compliance, orchestrating incident responses and security threat monitoring. Logpoint empowers businesses by integrating and correlating security data, improving cybersecurity posture in varied environments.

Logpoint

Rapid7 InsightIDR is a cloud-based security information and event management solution known for its user behavior analytics, offering rapid detection and response capabilities while facilitating seamless integration across systems.

Rapid7 InsightIDR is designed to enhance threat detection and investigation through its efficient user behavior analytics and advanced threat intelligence framework. The platform's cloud-based deployment ensures rapid setup and comprehensive event monitoring across diverse IT environments, including endpoints and Office 365. Its intuitive interface supports seamless data collection, honing in on threat detection through honeypot utilization and intelligent alerting. However, it is noted for lacking some customization features and better integration, especially with Microsoft and ITSMs.

What are the key features of Rapid7 InsightIDR?

User Behavior Analytics: Detects threats by analyzing patterns and anomalies.
Cloud Deployment: Enables quick setup and scalability.
Comprehensive Monitoring: Monitors events across systems and platforms like Office 365.
Honeypots and Alerting: Utilizes honeypots to reduce false positives and alert fatigue.
Threat Intelligence Framework: Supports effective threat hunting and remediation.

What benefits should users consider in reviews when evaluating Rapid7 InsightIDR?

Enhanced Detection: Improves threat detection with user behavior analysis.
Easy Integration: Integrates across systems for a streamlined security approach.
Rapid Response: Facilitates quick action against identified threats.
Operational Efficiency: Offers a cohesive view of security operations.

Rapid7 InsightIDR is prominently used in security operation centers to manage events, detect threats, and respond effectively. Industries apply it for network behavior monitoring, compliance, and vulnerability management. Companies integrate it with security tools to boost threat investigation, ensuring full SIEM functionalities and robust log management capacities. Its application spans behavioral and intrusion analytics, aiding in monitoring and addressing malicious activities.

Rapid7

Sample Customers

CBI Health Group, University Honda, VakifBank

AP Pension, Copenhagen Airports, KMD, Terma, DISA, Danish Crown, Durham City Council, Game, TopDanmark, Lahti Energia, Energi Midt, Synoptik, Eissmann Group Automotive, Aligro, CG50...

Liberty Wines, Pioneer Telephone, Visier

Buyer's Guide

Logpoint vs. Rapid7 InsightIDR

September 2026

Free Report: Logpoint vs. Rapid7 InsightIDR

Find out what your peers are saying about Logpoint vs. Rapid7 InsightIDR and other solutions. Updated: September 2026.

DOWNLOAD NOW

915,287 professionals have used our research since 2012.

See our Logpoint vs. Rapid7 InsightIDR report.

See our list of best Security Information and Event Management (SIEM) vendors, best User Entity Behavior Analytics (UEBA) vendors, and best Endpoint Detection and Response (EDR) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.