Rapid7 InsightIDR

What Rapid7 InsightIDR is

Rapid7 InsightIDR is a cloud-based security information and event management product accessed through the web. It collects log data for security monitoring, supports custom detection rules, and can generate real-time alerts. Users can query log entries with Log Entry Query Language (LEQL). Rapid7 lists three Incident Command plans. Essentials is described as streamlined SIEM, with 90 days of log retention and 13 months of alert and audit retention, both available with an add-on. Advanced adds AI triage, deception technology, and threat intelligence; its stated retention is 180 days for logs and 13 months for alerts and audits, with add-ons. Ultimate is described as offering full XDR capabilities, with the same retention periods and add-on conditions as Advanced. Pricing is on request. The product's listed data retention is 90 days. Rapid7 was founded in 2000 and is headquartered in Boston, Massachusetts, United States.

Who it suits

It suits organizations looking for web-based security monitoring with custom detection rules and real-time alerting. The listed plans give buyers distinct capability descriptions and log-retention periods to consider.

Limits

Essentials includes 90 days of log retention, with the stated 13 months of alert and audit retention available with an add-on. Advanced and Ultimate state 180 days of log retention and 13 months of alert and audit retention, also with add-ons.

Getting started

1. Visit Rapid7's InsightIDR product page.
2. Review the Incident Command Essentials, Advanced, and Ultimate plan descriptions.
3. Contact Rapid7 to request pricing.

Verdict

InsightIDR brings log monitoring, configurable detections, and real-time alerts into a cloud product. Compare the plan capabilities and add-on retention terms to decide whether its stated coverage fits your security monitoring needs.