Logpoint vs Rapid7 InsightIDR comparison

Logpoint and Rapid7 are both solutions in the Security Information and Event Management (SIEM) category. Logpoint is ranked #30 with an average rating of 8.3, while Rapid7 is ranked #25 with an average rating of 7.0. Additionally, 86% of Logpoint users are willing to recommend the solution, compared to 96% of Rapid7 users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Logpoint and Rapid7 InsightIDR are both robust security information and event management (SIEM) solutions. Rapid7 InsightIDR is favored due to its comprehensive features and value despite higher costs compared to Logpoint.

Features: Logpoint is known for its ease of use, efficient log management, and security analytics capabilities. Rapid7 InsightIDR offers advanced threat detection, investigation, and response features. Users highlight InsightIDR's asset prioritization and automated response workflows as particularly valuable.

Room for Improvement: Users suggest Logpoint improve its integration with third-party tools, its alerting system, and reporting functionalities. Rapid7 InsightIDR users indicate the need for enhancements in reporting functionalities, reduction of false positives, and improvements in usability to counter initial complexity.

Ease of Deployment and Customer Service: Logpoint users report a straightforward deployment process and satisfactory customer service. Rapid7 InsightIDR also receives positive feedback on ease of deployment, though some users mention a steep learning curve. Both products provide reliable customer service, but Logpoint's simpler deployment process is more appealing for customers with limited IT resources.

Pricing and ROI: Logpoint users find the pricing competitive and the return on investment satisfactory. Rapid7 InsightIDR, while more expensive, is considered worth the investment due to its superior features and capabilities. Users note that despite higher costs, InsightIDR offers a better ROI through enhanced security and efficiency.

To learn more, read our detailed Logpoint vs. Rapid7 InsightIDR Report (Updated: May 2026).

Buyer's Guide

Logpoint vs. Rapid7 InsightIDR

May 2026

Download the complete report

Helped 899,125 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Rifat Hasan

System Engineer at Corporate Projukti Limited

Has lacked proper integration and consistent support communication

I selected Logpoint for the pricing as it is reasonable. I am located in Bangladesh, South Asia, Dhaka. I have tried to contact Exabeam by mail repeatedly, but there has been no response. My company, Corporate Projukti Limited, including my Bangladesh area head, technical director, and team manager, have sent emails to contact Exabeam solution, but there is no response. There is already a distributor in Bangladesh. The weakness with Logpoint is UEBA. UEBA is recommended, but not extra. Exabeam's UEBA is an extra feature. SOAR is extra, but Logpoint's product measurement is 40 or 50. There is a 10% difference with the UEBA and SOAR, so Logpoint is weak there. I would appreciate extra features in Logpoint such as SOAR. SOAR and UEBA are included features in Logpoint. Logpoint's UEBA is a weak point, while Exabeam's UEBA has extra AI through automation. Exabeam has a license included, and the extra license is an add-on. In Logpoint, it is included, which makes it a weak point.

Read full review

SohailHyder

Head Of Cyber Security at Super Secure

Has supported compliance needs for mid-sized organizations but lacks customization and advanced integration

If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is. This is where it can improve if we keep in front the feature sets of a complete SIEM solution. Most common in the market is QRadar, but it is depleting now. It has been taken over by some other products such as Splunk and LogRhythm. If we compare these things with Rapid7 InsightIDR, then there are definitely some gaps that need to be filled. Data retention is also one concern because Rapid7 InsightIDR is cloud-based and operates on a subscription model. Whatever data you want to retain, it has to be paid for separately or it has a cost. Other solutions that are on-premises can have their own infrastructure or they provide some data retention for a month or in some capacity-wise, they provide that solution to them which makes them more attractive.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"If any application performs suspicious activities, such as changing registries or modifying other applications, Cortex XDR detects and blocks the entire application."

"The most valuable for us is the correlation feature."

"Its ability to react to cyber data attacks is awesome."

"Cortex XDR can integrate the firewalls and determine the tendencies of the attacks. It's a new generation antivirus, with protection endpoints and detection response. It is very easy to use and everybody can operate the solution."

"We use Cortex XDR by Palo Alto Networks for its ability to detect based on behavior rather than simple virus scan to prevent malicious activities."

"There has been a significant reduction of approximately 70% to 80% in our internal MTTR and MTTD metrics, now around five to eight minutes whereas previously it was hours, which has helped tremendously."

"It collects and caches and the knowledge of machine learning from different customers to take to the cloud, it makes it better to use for everybody, it allows for quick learning and updates and can, therefore, offer zero-day malware security, and this sharing of metadata helps make the solution very safe."

"The solution allows us to make investigations. Other XDR solutions also provide similar capabilities but for investigation, Cortex XDR is better."

More Cortex XDR by Palo Alto Networks pros

"The flexibility of the search feature and the solution's analytics features are the most valuable parts of the solution, and it's also very user-friendly."

"The UEBA component, as well as the SOAR component, are some of the most valuable features of Logpoint."

"It is a very comprehensive solution for gathering data. It has got a lot of capabilities for collecting logs from different systems. Logs are notoriously difficult to collect because they come in all formats. LogPoint has a very sophisticated mechanism for you to be able to connect to or listen to a system, get the data, and parse it. Logs come in text formats that are not easily parseable because all logs are not the same, but with LogPoint, you can define a policy for collecting the data. You can create a parser very quickly to get the logs into a structured mechanism so that you can analyze them."

"Technical support is responsive and very friendly."

"It is a good cost proposition, and it works extremely well and very fast."

"What I like best about LogPoint is its cost-effectiveness compared to other solutions. LogPoint also has better dashboards which I find valuable. I also like that you can create use cases based on your assets."

"The most valuable feature, which is endpoint security, is included in Logpoint, and an extra feature is the integration."

"In my experience with medium-sized operations, LogPoint's scalability is excellent, so I would rate it a ten out of ten."

More Logpoint pros

"Great coverage of all systems within our network from endpoint to firewall."

"The platform offers unlimited storage and agent-based solutions."

"Rapid7 InsightIDR is budget-friendly and has a good market position because not everybody can afford to go for LogRhythm or Splunk or QRadar."

"InsightIDR helps us investigate an environment to discover information about incidents."

"Simple configuration and automatically syncs to the cloud platform."

"InsightIDR has allowed us to find potential security issues that we did not know existed, and get remediation quickly."

"I am able to run automated actions based on the output of reports, leaving me extra time to focus on more pressing matters."

"I definitely recommend Rapid7 InsightIDR."

More Rapid7 InsightIDR pros

Cons

"This product has not improved my organization - in fact, we are in the process of moving back to another product as a result of Cortex's horrible impact on system performance."

"Cortex XDR should have a lightweight agent, and the agent size should not be heavy."

"Cortex XDR by Palo Alto Networks is not only pricey; it is extremely expensive."

"It would be good if they could make an exception for applications. Sometimes, it can be a bit of a challenge to make exceptions for certain applications that have been used as rogue."

"The only issues that we have are, one the cost, two the dashboard is not very intuitive, even though you can drill down within the dashboard, we usually have to gather information from other sources to determine locations and if its a false positive."

"They've been having some issues with updating their endpoint agents, and it has been quite frustrating."

"I have seen lagging with Cortex XDR by Palo Alto Networks. There was one time when we faced a threat actor trying to gain access to our system. When our team utilized the tool, we were all on the same dashboard and we faced a lag issue at that time of around five minutes, which was quite significant."

"It's not an ideal choice for smaller businesses, as you need a minimum of 200 endpoints to even use the solution at all."

More Cortex XDR by Palo Alto Networks cons

"I would rate the stability of Logpoint as a six out of ten. I have received reports indicating glitches and downtimes with Logpoint."

"It is complicated to collect daily logs from other systems."

"LogPoint is complex and we don't have the skills to maintain use cases or even to extend the use cases."

"The documentation part is something that needs to be improved, as well as the threat intelligence investigation part."

"One of the downsides is it is not a SaaS solution. It must be on-premises."

"Logpoint is not flexible. Its documentation is not user-friendly."

"It needs to improve performance. That's somehow something that others do better."

"Log management could be better because transporting the log from a password to the client system takes time."

More Logpoint cons

"Currently, it lacks the functionalities provided by Rapid7's User Behavior Analytics (UBA)."

"Rapid7's customer support is awful. They didn't respond at all."

"I would like the ability to adjust the threshold of certain existing alerts. Currently the only option is to change the notifications or create my own alert."

"InsightIDR is only available in a cloud version. Some of our customers prefer an on-prem solution because they want to manage the security within their environment."

"The ability to tune the collector for custom logs would greatly help."

"I would like to see more development in InsightIDR towards building their SIEM solution and converting it to XDR."

"I'd like to see a mobile application included and some feature related to the generality of segregation for internal users that access the application."

"Rapid7 doesn't integrate well with all our security tools from various vendors, so we plan to switch. Many of our solutions work with Rapid7, but some do not. We are already searching for a replacement already."

More Rapid7 InsightIDR cons

Pricing and Cost Advice

"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."

"Our license will require renewal in August, after which the maintenance will continue as usual."

"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."

"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."

"It has reasonable pricing for the use cases it provides to the company."

"Our customers have expressed that the price is high."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"My company used to pay for LogPoint costs annually. It's a cost-effective solution. I'm not part of the Finance team, though, so I'm not sure exactly what the licensing fee is or what license my company had."

"For a hundred user deployment the cost is about $10,000. The next year it would be the same because it's a subscription-based license. There are separate costs as well, for example, if a customer asks for training for their staff."

"It's less expensive than the competitors. The Logpoint marketing team is very accommodating and client-friendly. They offer very good reductions in price. They are pretty good in this aspect. They are transparent in their licensing and pricing."

"On a scale of one to ten, where one is cheap, and ten is expensive, I would rate LogPoint's pricing a seven. It is not very expensive compared to some of the more costly products, and it is not very cheap compared to some of the cheaper products in the SIEM market."

"It has a fixed price, which is what I like about LogPoint. I bought the system and paid for it, and I pay maintenance. It is not a consumption model. Most SIEMs or most of the log management systems are consumption-based, which means that you pay for how many logs you have in the system. That's a real problem because logs can grow very quickly in different circumstances, and when you have a variable price model, you never know what you're going to pay. Splunk is notoriously expensive for that reason. If you use Splunk or QRadar, it becomes expensive because there are not just the logs; you also have to parse the logs and create indexes. Those indexes can be very expensive in terms of space. Therefore, if they charge you by this space, you can end up paying a significant amount of money. It can be more than what you expect to pay. I like the fact that LogPoint has a fixed cost. I know what I'm going to pay on a yearly basis. I pay that, and I pay the maintenance, and I just make it work."

"Our licensing fees are about $10,000 USD per month, which I think is fair."

"It's getting more expensive, which is one of the reasons we're looking around just to see if there's anything better value."

"Logpoint's pricing is mid-ranged and depends on the number of devices."

More Logpoint pricing and cost advice

"Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."

"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help."

"It is more reasonably priced than other vendors."

"It is a reasonably priced solution."

"Rapid7 InsightIDR charges us based on the endpoints we connect to."

"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."

"The pricing of the solution depends on the user. But there is a yearly licensing cost."

"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."

More Rapid7 InsightIDR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

899,125 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

12%

Financial Services Firm

11%

Manufacturing Company

11%

Comms Service Provider

Construction Company

14%

Computer Software Company

14%

Manufacturing Company

12%

Financial Services Firm

Manufacturing Company

Financial Services Firm

Computer Software Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	47
Midsize Enterprise	20
Large Enterprise	51

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	3
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	21
Midsize Enterprise	5
Large Enterprise	6

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for LogPoint?

I rate the pricing at eight, suggesting it's relatively good or affordable.

See all answers

What needs improvement with LogPoint?

I selected Logpoint for the pricing as it is reasonable. I am located in Bangladesh, South Asia, Dhaka. I have tried ...

See all answers

What is your primary use case for LogPoint?

I had experience with Logpoint before, and I contacted the Exabeam solution, but there was no response; they did not ...

See all answers

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is a...

See all answers

What is your experience regarding pricing and costs for Rapid7 InsightIDR?

The product pricing is very cheap.

See all answers

What needs improvement with Rapid7 InsightIDR?

If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as ...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 10% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

IBM Security QRadar vs Logpoint

Compared 8% of the time

Splunk Enterprise Security vs Logpoint

Compared 7% of the time

Elastic Security vs Logpoint

Compared 6% of the time

USM Anywhere vs Logpoint

Compared 3% of the time

Trellix Endpoint Security Platform vs Logpoint

Compared 2% of the time

More Logpoint Competitors

Microsoft Sentinel vs Rapid7 InsightIDR

Compared 4% of the time

Splunk Enterprise Security vs Rapid7 InsightIDR

Compared 4% of the time

Adlumin Security Operations vs Rapid7 InsightIDR

Compared 3% of the time

Vectra AI vs Rapid7 InsightIDR

Compared 3% of the time

Darktrace vs Rapid7 InsightIDR

Compared 3% of the time

More Rapid7 InsightIDR Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

June 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Logpoint

May 2026

Download Logpoint product report

Buyer's Guide

Rapid7 InsightIDR

May 2026

Download Rapid7 InsightIDR product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

InsightIDR

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Logpoint offers a robust SIEM system tailored for compliance with regulations like PCI DSS and GDPR, enhancing security monitoring and enabling efficient incident response.

Logpoint strengthens cybersecurity by offering essential tools for log collection, security monitoring, and forensic analysis. Its features include an intuitive dashboard, a powerful correlation engine, and extensive third-party integrations, making it a versatile asset for security operations centers. Despite its advantages, areas for improvement include ransomware protection, cloud-native deployment, and more flexible pricing. Improvements in features like SOAR and UEBA functionality can boost its competitiveness.

What are the most important features of Logpoint?

Easy-to-use dashboard: Simplifies interaction with intuitive design.
Correlation engine: Connects data for in-depth security insights.
Comprehensive log collection: Facilitates extensive data gathering.
Third-party integrations: Connects seamlessly with other tools.
UEBA and SOAR components: Enhance threat response and automation.

What benefits and ROI should users consider?

Cost-effectiveness: Provides significant value for its pricing.
User-friendly interface: Enhances usability with straightforward design.
Compliance navigation: Eases PCI DSS and GDPR compliance.
Quick support service: Provides responsive customer assistance.

Many organizations utilize Logpoint across industries as part of their security infrastructure. It supports standard compliance, orchestrating incident responses and security threat monitoring. Logpoint empowers businesses by integrating and correlating security data, improving cybersecurity posture in varied environments.

Logpoint

Rapid7 InsightIDR is a cloud-based security information and event management solution known for its user behavior analytics, offering rapid detection and response capabilities while facilitating seamless integration across systems.

Rapid7 InsightIDR is designed to enhance threat detection and investigation through its efficient user behavior analytics and advanced threat intelligence framework. The platform's cloud-based deployment ensures rapid setup and comprehensive event monitoring across diverse IT environments, including endpoints and Office 365. Its intuitive interface supports seamless data collection, honing in on threat detection through honeypot utilization and intelligent alerting. However, it is noted for lacking some customization features and better integration, especially with Microsoft and ITSMs.

What are the key features of Rapid7 InsightIDR?

User Behavior Analytics: Detects threats by analyzing patterns and anomalies.
Cloud Deployment: Enables quick setup and scalability.
Comprehensive Monitoring: Monitors events across systems and platforms like Office 365.
Honeypots and Alerting: Utilizes honeypots to reduce false positives and alert fatigue.
Threat Intelligence Framework: Supports effective threat hunting and remediation.

What benefits should users consider in reviews when evaluating Rapid7 InsightIDR?

Enhanced Detection: Improves threat detection with user behavior analysis.
Easy Integration: Integrates across systems for a streamlined security approach.
Rapid Response: Facilitates quick action against identified threats.
Operational Efficiency: Offers a cohesive view of security operations.

Rapid7 InsightIDR is prominently used in security operation centers to manage events, detect threats, and respond effectively. Industries apply it for network behavior monitoring, compliance, and vulnerability management. Companies integrate it with security tools to boost threat investigation, ensuring full SIEM functionalities and robust log management capacities. Its application spans behavioral and intrusion analytics, aiding in monitoring and addressing malicious activities.

Rapid7

Sample Customers

CBI Health Group, University Honda, VakifBank

AP Pension, Copenhagen Airports, KMD, Terma, DISA, Danish Crown, Durham City Council, Game, TopDanmark, Lahti Energia, Energi Midt, Synoptik, Eissmann Group Automotive, Aligro, CG50...

Liberty Wines, Pioneer Telephone, Visier

Buyer's Guide

Logpoint vs. Rapid7 InsightIDR

May 2026

Free Report: Logpoint vs. Rapid7 InsightIDR

Find out what your peers are saying about Logpoint vs. Rapid7 InsightIDR and other solutions. Updated: May 2026.

DOWNLOAD NOW

899,125 professionals have used our research since 2012.

See our Logpoint vs. Rapid7 InsightIDR report.

See our list of best Security Information and Event Management (SIEM) vendors, best User Entity Behavior Analytics (UEBA) vendors, and best Endpoint Detection and Response (EDR) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.