Rapid7 InsightIDR vs Trellix Endpoint Detection and Response (EDR) comparison

"Scalability-wise, I rate the solution a ten out of ten. As a cloud tool, the product is highly scalable."

"We were able to identify criminals attempting to login from China and put a stop on their IP locations."

"It is a very stable solution."

"Enables the use of honey pots, honey users, and honey files to monitor for suspicious patterns."

"Great coverage of all systems within our network from endpoint to firewall."

"Integration with threat modeling from the Metasploit and InsightIDR repositories."

"InsightIDR has allowed us to find potential security issues that we did not know existed, and get remediation quickly."

"The solution is very scalable in terms of the licensing model."

"The product's initial setup phase was very straightforward since you just need to install it, and it works."

"The dashboard makes it easier and more effective to analyze data."

"Trellix Endpoint Detection and Response (EDR) offers endpoint protection and helps collect information while also allowing users to investigate malicious files in an IT environment...It is a stable solution...It is a scalable solution."

"It relies on external systems for detection and then asks the endpoint to handle blocking. However, the most crucial feature is its investigative capabilities. With real-time search and other functionalities, it enables comprehensive detection and response."

"When Trellix detects some threats, the device is isolated in a quarantine zone for examination."

"This is a stable product."

"The product provides a one-click recovery of encrypted files."

"It is a stable solution. Stability-wise, I rate the solution a nine out of ten...I rate the solution's technical support team a nine and a half or ten out of ten."

"The solution needs improvement in threat intelligence. Increasing the depth of intelligence to help users understand more about threats is a possibility. My suggestion is to expand access to other websites or resources."

"Customised alert recipients need to be added to allow better first-line action and quicker response. Configurable honeypots would be a welcome addition."

"Rapid7 doesn't integrate well with all our security tools from various vendors, so we plan to switch. Many of our solutions work with Rapid7, but some do not. We are already searching for a replacement already."

"The APIs can be further improved in Rapid7."

"The integration capabilities of the solution have certain shortcomings where improvements are required."

"The solution's XDR agents cannot compete with the XDR solutions out there yet."

"The product allows us to make only 30 custom rules."

"Tenable Nessus is easier to deal with. It's more efficient and accurate. InsightIDR is heavier than Tenable in terms of performance and scanning. Rapid7 would be much easier to use if it had a network connector like Tenable. Tenable's connector allows continuous monitoring over the B caps."

"I remember doing many tickets for Trellix support, and my EDR was not properly functioning. I didn't feel the detection or the real protection."

"The main drawbacks are resources and processing time, as it consumes a lot of CPU and RAM."

"The technical support must be improved."

"The alert feature of McAfee MVISION Endpoint Detection and Response needs improvement because for you to get the alerts, you have to log on to the portal. What my company needs is a tool that sends you alerts. For example, if it detects a threat on your machine, it should send you an alert. My company gets the alerts instead from the antivirus software rather than the EDR. If you want to see the alerts on McAfee MVISION Endpoint Detection and Response, you have to connect to the system manually. Another area for improvement in the tool is the reporting. My company needs weekly and monthly reports about the alerts, but you can't extract reports from McAfee MVISION Endpoint Detection and Response, so a decision was made to move to another EDR solution, particularly Microsoft Defender for Endpoint, next month. My company tested Microsoft Defender for Endpoint via a POC for one to three months. The resource usage of McAfee MVISION Endpoint Detection and Response is also an area for improvement because it consumes a lot of memory. For example, during the on-demand scan, you can't work because of the high CPU usage. You need to schedule the scans. McAfee MVISION Endpoint Detection and Response has a lot of modules, but my company doesn't use all modules."

"The dashboard is split across different platforms. For example, if you want information on Incident Detection, you have to access one dashboard, and for DLP reporting, there's a separate platform. This fragmentation means you can't access everything from a single dashboard."

"Trellix does not support Linux and Mac."

"The solution's downside stems from the fact that Trellix Endpoint Detection and Response (EDR) and McAfee MVISION Endpoint are not combined into a single solution, so from an improvement perspective, they need to be combined into a single solution."

"The solution lacks the ability to integrate with external platforms. In future releases of the solution, I would like to see the solution increase its integration capabilities with external platforms."

"​I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability.​"

"​Accurately predict your licensing counts as this is a subscription based product.​"

"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."

"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."

"Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs."

"Rapid7 InsightIDR charges us based on the endpoints we connect to."

"It is more reasonably priced than other vendors."

"Rapid7 InsightIDR's pricing is reasonable."

"McAfee MVISION Endpoint Detection and Response is reasonable in terms of cost. It's a tool my company has been using for a few years now. It costs $25,000 to $30,000 for six hundred users."

"The price is reasonable."

"Speaking about the price, you must use the product to find the product's cost for you."

"The product’s pricing is reasonable."

"Pricing is a problem in South Africa. It could be cheaper here. The rand-to-dollar exchange rate makes it expensive for us. A 25 dollar endpoint cost becomes quite significant when converted to rand."

"Pricing for McAfee MVISION Endpoint Detection and Response is not that expensive, but it's not something that a startup could buy. Pricing for it is for midsized businesses. There's an additional payment if you want data retention for more than thirty days. They gave us data retention for thirty days. Then if you want longer data retention, they have the paid option for a three-month data retention period and for a one-year data retention period."

"On a scale of one to ten, where one is low and ten is high, I rate the solution's pricing an eight out of ten."

"The cost is okay, compared to other products."