Security analytics & SIEM · Rapid7, Inc.

Rapid7 InsightIDR

Cloud SIEM/XDR from Rapid7 combining log search, UEBA and endpoint detection, priced per monitored asset rather than per GB.

Visit Rapid7 InsightIDR Alternatives

InsightIDR is Rapid7's cloud-delivered SIEM and XDR product, built on the same Insight platform as Rapid7's vulnerability management and application security tools, which lets a security team correlate detection data with asset and exposure context from those other products. It combines log search, user behavior analytics, and endpoint detection agents, and is aimed at lean security teams that want faster time-to-value than a build-your-own correlation-rule SIEM. Rapid7 prices InsightIDR primarily by number of protected assets rather than data volume, which it markets as more predictable than per-GB SIEM billing, though exact rates are not published and require a quote (with volume discounts starting around 500 assets).

At a glance

Vendor Rapid7, Inc.
Pricing model Quote only
Free tier No
Deployment Cloud
Open source No
Best for Lean security teams wanting predictable, asset-based SIEM pricing tied into vulnerability management context.

Pricing

Asset-based pricing (not per-GB), sold in Essential/Advanced/Ultimate tiers; exact rates require a quote, with volume discounts from ~500 assets.

Checked on the vendor's own page on September 21, 2026: no prices are published. Expect to be quoted.

Features

  • Cloud SIEM with log search and correlation
  • User and entity behavior analytics (UEBA)
  • Endpoint detection and response (EDR) agent
  • Asset-based pricing model instead of per-GB
  • Shared context with Rapid7 vulnerability management
  • Managed detection and response (MDR) add-on available

Integrations

Profile last reviewed September 21, 2026

Head to head

Alternatives

Microsoft Sentinel Cloud-native SIEM and SOAR built on Azure Log Analytics, billed per GB ingested per day with optional commitment discounts. Exabeam SIEM/security analytics platform built around behavioral baselining (UEBA) to surface anomalous user and entity activity. Wazuh Free, open-source security platform combining SIEM and XDR capabilities for log analysis, threat detection and compliance.

Rapid7 InsightIDR in the index now

Terms to know

Anomaly detection Identifying data points or patterns that deviate significantly from expected or normal behavior. Endpoint detection and response (EDR) Software that continuously records endpoint activity, applies detection logic, and lets responders investigate and contain threats. SIEM (security information and event management) A platform that centralizes and correlates log and event data across an IT environment to detect and investigate security threats. User and entity behavior analytics (UEBA) Analytics that baseline normal user and device behavior and flag deviations that could signal a compromise, even without a known IOC.

Related guides

How to choose a SIEM Choose a SIEM by deployment model, whether detection is rule-based, behavioral, or code, and how the storage architecture handles cost as retention grows.