Try our new research platform with insights from 80,000+ expert users

Rapid7 InsightIDR vs USM Anywhere comparison

Rapid7 and LevelBlue are both solutions in the Security Information and Event Management (SIEM) category. Rapid7 is ranked #9 with an average rating of 8.1, while LevelBlue is ranked #30 with an average rating of 7.3. Rapid7 holds a 2.6% mindshare in SIEM, compared to LevelBlue’s 1.2% mindshare. Additionally, 95% of Rapid7 users are willing to recommend the solution, compared to 92% of LevelBlue users who would recommend it.
Rapid7 InsightIDR
Read 31 Rapid7 InsightIDR reviews
  • 4,823 Views
  • 2,829 Comparison Views
95% willing to recommend
USM Anywhere
Read 115 USM Anywhere reviews
  • 2,934 Views
  • 2,043 Comparison Views
92% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Sep 9, 2024

USM Anywhere and Rapid7 InsightIDR compete in the comprehensive security information and event management (SIEM) solutions category. Rapid7 InsightIDR holds an edge due to its advanced threat detection capabilities despite its higher pricing.

Features: USM Anywhere offers unified management of multiple security capabilities, intuitive workflows, and streamlined operations. Rapid7 InsightIDR includes advanced threat detection, user behavior analytics, and robust integration capabilities.

Room for Improvement: USM Anywhere could benefit from more in-depth reporting options, enhanced automation, and improved data insights. Rapid7 InsightIDR requires better support for custom log ingestion, more flexible reporting tools, and greater customization options.

Ease of Deployment and Customer Service: USM Anywhere is praised for straightforward deployment and strong support. Rapid7 InsightIDR integrates easily with existing infrastructures but has mixed reviews on customer service.

Pricing and ROI: USM Anywhere is cost-effective, providing a good balance of features for the price, ensuring strong ROI. Rapid7 InsightIDR, though higher in cost, delivers significant returns with its advanced capabilities, making the higher initial investment worthwhile.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Rapid7 InsightIDR vs. USM Anywhere Report (Updated: January 2025).
Buyer's Guide
Rapid7 InsightIDR vs. USM Anywhere
January 2025
Download the complete report
Helped 831,158 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Rapid7 InsightIDR
Ranking in Security Information and Event Management (SIEM)
9th
Ranking in Endpoint Detection and Response (EDR)
20th
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
31
Ranking in other categories
User Entity Behavior Analytics (UEBA) (3rd), Threat Deception Platforms (5th), Extended Detection and Response (XDR) (15th)
USM Anywhere
Ranking in Security Information and Event Management (SIEM)
30th
Ranking in Endpoint Detection and Response (EDR)
52nd
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
115
Ranking in other categories
Log Management (38th), Compliance Management (12th)
 

Mindshare comparison

As of January 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Rapid7 InsightIDR is 2.6%, down from 2.7% compared to the previous year. The mindshare of USM Anywhere is 1.2%, down from 2.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM)
 

Featured Reviews

Prasanth Prasad - PeerSpot reviewer
Offers capabilities in areas like threat intelligence and vulnerability management but needs to improve support
The most valuable feature of the product for managing security events stems from the fact that the product's intelligence part is very good since it offers its own threat intelligence and vulnerability management platform. The tool also has its own cloud security posture management platform. The tool also is a dynamic application security testing platform. The aforementioned tools fall under Rapid7 InsightIDR's kitty. The intelligence and the data that Rapid7 gathers from customers across the globe enrich the quality of its detection capabilities. All other tools in the market depend on third-party solutions for intelligence. Rapid7 InsightIDr has the intelligence part natively available within the product, giving it a good edge over other vendors.
Read full review
Kris Nawani - PeerSpot reviewer
Offers complete coverage without the need to install additional software
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Another very important part of insightIDR is the ability to collect data from endpoint devices via agent software. With a large remote workforce, this allows visibility into the endpoints that are connected to the internet, but not to the corporate network."
"The UI is very good."
"The ability to ingest Office 365 log files, then process them into events and display them on a map."
"The biggest reason why we chose Rapid7 was to gain value in a really quick time. Its deployment doesn't take months. It just takes a few days."
"The solution is very stable and works very well for what I need it to do."
"The product works well. Stability-wise, I rate the solution a ten out of ten."
"InsightIDR has allowed us to find potential security issues that we did not know existed, and get remediation quickly."
"The log aggregation and storage provided by InsightIDR has shown no issues with scalability; aggregating over one hundred millions events daily."
More Rapid7 InsightIDR pros
"The setup is very easy and straightforward."
"It provides a single pane of glass view, coupled with a whole security ecosystem. The ability to manage everything from a central point, including vulnerability assessments, asset management - including the services provided by the various hosts, NIDS, HIDS, etc. - provides a very efficient way of dealing with things."
"It has powerful threat detection, incident response, and compliance management."
"It allows you to define what alerts you want to see, or not to see, as well as if you want them grouped, or ungrouped."
"AlienVault has an advanced component within one package. With this, we can cover more area with one solution."
"We are able to get alerts perfectly with FIM and VA features."
"The feature that I liked the most is that they have a vulnerability assessment package that comes along with the SIEM solution. So, whenever I find any threat or alert for any of the devices or servers, I could immediately initiate a vulnerability assessment scan on that machine. That is one of a kind. The price at which AlienVault operates is also valuable."
"AlienVault's reporting is good. I like that vulnerability assessment is part of the solution, and the UI is intuitive. Also, the overhead is low, which is to say we don't need a dedicated SOC team to manage and analyze things constantly. We're a small company that doesn't have those resources."
More USM Anywhere pros
 

Cons

"The ability to tune the collector for custom logs would greatly help."
"I feel it would greatly benefit from more supported log sources."
"Sometimes, it is hard to get the right queries to use. Currently, the tool lacks a pre-made set of queries."
"They should add more configuration and security features to it."
"It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required."
"Currently, it lacks the functionalities provided by Rapid7's User Behavior Analytics (UBA)."
"Customised alert recipients need to be added to allow better first-line action and quicker response. Configurable honeypots would be a welcome addition."
"The searching feature in Rapid7 InsightIDR needs to evolve"
More Rapid7 InsightIDR cons
"The GUI needs to improve because it's not user-friendly."
"Reporting is convoluted and difficult at times, although they claim to have hundreds of pre-built reports, very few of them are actually useful for anything but what the USM is doing."
"More complimentary training needs to be done for use with this tool. If you get into a bind, then it will cost you."
"The UI and overall processes need a little bit more love. This shows in the error banners that come up when you select certain things. There isn't a day that goes by that the UI doesn't error out and I can't view events for an alarm."
"The only complex area of the setup was writing the custom scripts."
"It would be nice to see some machine learning and monitoring of the configuration in network devices."
"I want to see more compliance management capability. The quality of integrations seems to be a little bit low."
"Windows log collection works with HIDS, but documentation is sparse and confusing."
More USM Anywhere cons
 

Pricing and Cost Advice

"It is a reasonably priced solution."
"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."
"Rapid7 InsightIDR's pricing is reasonable."
"The solution has a mid-range price point in the market"
"It is more reasonably priced than other vendors."
"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."
"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."
"Rapid7 InsightIDR charges us based on the endpoints we connect to."
More Rapid7 InsightIDR pricing and cost advice
"Negotiate the best package for your environment."
"Do the one month trial and try to work out the kinks during it, as it has free support and service hours."
"The price for this solution is very good, but since the features do not work the price is expensive."
"QRadar, ArcSight and Splunk are some of the most expensive SIEM products out there in the market and not everyone has the budget to buy them. In such cases, AV USM is a very cost effective alternative."
"Its price is much lower than McAfee ESM."
"We ran a few PoCs. The price and feature set were the best with AlienVault."
"We pay around $12,000 a year including storage."
"Its price is in the medium to upper range."
More USM Anywhere pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
See recommendations
831,158 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
8%
Manufacturing Company
8%
Government
6%
Computer Software Company
19%
Educational Organization
8%
Financial Services Firm
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
See all answers
What do you like most about Rapid7 InsightIDR?
During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...
See all answers
What is your experience regarding pricing and costs for Rapid7 InsightIDR?
The product pricing is very cheap.
See all answers
What do you like most about AT&T AlienVault USM?
The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful.
See all answers
What is your experience regarding pricing and costs for AT&T AlienVault USM?
The pricing is amazing and really cheap.
See all answers
What needs improvement with AT&T AlienVault USM?
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.
See all answers
 

Comparisons

Darktrace vs Rapid7 InsightIDR Logo
Darktrace vs Rapid7 InsightIDR
Compared 13% of the time
Microsoft Sentinel vs Rapid7 InsightIDR Logo
Microsoft Sentinel vs Rapid7 InsightIDR
Compared 10% of the time
Rapid7 InsightVM vs Rapid7 InsightIDR Logo
Rapid7 InsightVM vs Rapid7 InsightIDR
Compared 8% of the time
CrowdStrike Falcon vs Rapid7 InsightIDR Logo
CrowdStrike Falcon vs Rapid7 InsightIDR
Compared 6% of the time
Splunk Enterprise Security vs Rapid7 InsightIDR Logo
Splunk Enterprise Security vs Rapid7 InsightIDR
Compared 5% of the time
More Rapid7 InsightIDR Competitors
AlienVault OSSIM vs USM Anywhere Logo
AlienVault OSSIM vs USM Anywhere
Compared 21% of the time
Wazuh vs USM Anywhere Logo
Wazuh vs USM Anywhere
Compared 17% of the time
Splunk Enterprise Security vs USM Anywhere Logo
Splunk Enterprise Security vs USM Anywhere
Compared 11% of the time
IBM Security QRadar vs USM Anywhere Logo
IBM Security QRadar vs USM Anywhere
Compared 9% of the time
Microsoft Sentinel vs USM Anywhere Logo
Microsoft Sentinel vs USM Anywhere
Compared 7% of the time
More USM Anywhere Competitors
 

Product Reports

Buyer's Guide
Rapid7 InsightIDR
January 2025
Rapid7 InsightIDR reportDownload Rapid7 InsightIDR product report
Buyer's Guide
USM Anywhere
December 2024
USM Anywhere reportDownload USM Anywhere product report
 

Also Known As

InsightIDR
AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity
 

Learn More

Rapid7
Video not available
LevelBlue
 

Overview

Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

USM Anywhere centralizes security monitoring of networks and devices in the cloud, on premises, and in remote locations, helping you to detect threats virtually anywhere.

Discover

  • Network asset discovery
  • Software & services discovery
  • AWS asset discovery
  • Azure asset discovery
  • Google Cloud Platform asset discovery

Analyze

  • SIEM event correlation, auto-prioritized alarms
  • User activity monitoring
  • Up to 90-days of online, searchable events

Detect

  • Cloud intrusion detection (AWS, Azure, GCP)
  • Network intrusion detection (NIDS)
  • Host intrusion detection (HIDS)
  • Endpoint Detection and Response (EDR)

Respond

  • Forensics querying
  • Automate & orchestrate response
  • Notifications and ticketing

Assess

  • Vulnerability scanning
  • Cloud infrastructure assessment
  • User & asset configuration
  • Dark web monitoring

Report

  • Pre-built compliance reporting templates
  • Pre-built event reporting templates
  • Customizable views and dashboards
  • Log storage
 

Sample Customers

Liberty Wines, Pioneer Telephone, Visier
Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom
Buyer's Guide
Rapid7 InsightIDR vs. USM Anywhere
January 2025
Free Report: Rapid7 InsightIDR vs. USM Anywhere
Find out what your peers are saying about Rapid7 InsightIDR vs. USM Anywhere and other solutions. Updated: January 2025.
DOWNLOAD NOW
831,158 professionals have used our research since 2012.
See our Rapid7 InsightIDR vs. USM Anywhere report.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.