No more typing reviews! Try our Samantha, our new voice AI agent.

ESET PROTECT Enterprise vs Rapid7 InsightIDR comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
4th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
115
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
ESET PROTECT Enterprise
Ranking in Extended Detection and Response (XDR)
17th
Average Rating
8.8
Reviews Sentiment
7.0
Number of Reviews
16
Ranking in other categories
Anti-Malware Tools (10th)
Rapid7 InsightIDR
Ranking in Extended Detection and Response (XDR)
19th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
33
Ranking in other categories
Security Information and Event Management (SIEM) (24th), User Entity Behavior Analytics (UEBA) (11th), Endpoint Detection and Response (EDR) (34th), Threat Deception Platforms (4th)
 

Mindshare comparison

As of August 2026, in the Extended Detection and Response (XDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.5%, down from 5.0% compared to the previous year. The mindshare of ESET PROTECT Enterprise is 1.2%, up from 0.8% compared to the previous year. The mindshare of Rapid7 InsightIDR is 2.2%, down from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks4.5%
ESET PROTECT Enterprise1.2%
Rapid7 InsightIDR2.2%
Other92.1%
Extended Detection and Response (XDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Manikumar David - PeerSpot reviewer
IT Manager at R K Khanna and Associates
Provides comprehensive monitoring and policy implementation with room for memory optimization
ESET PROTECT Enterprise makes the system a little slow sometimes and updates occur at startup. Sometimes unwanted pop-ups appear to users, and they are unable to disable them. The user-friendliness is lacking in some areas. When users are using any computer, ESET PROTECT Enterprise should work in the background without consuming much memory, and any updates should proceed in the background without disturbing the user.
Prajwal Chougale - PeerSpot reviewer
System Analyst at a tech services company with 51-200 employees
Centralized threat hunting has improved alert accuracy and simplifies incident investigations
I would say there are two areas for improvement: the reporting dashboard that provides insights or reports weekly or monthly lacks detailed information about how logs are being ingested. While the details are there, they could be more concise and easier to understand for any level of authority. The second area is alert tuning; compared to Microsoft Sentinel, Rapid7 InsightIDR provides fewer alerts with more static alert functionality and lacks dynamic alerting exposures. There could be improvements to learn from past alert activities for more dynamic alert configurations. These two areas are the main areas for improvement; everything else is good.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cortex XDR by Palo Alto Networks is specifically designed to prevent zero-day attacks and is part of an ecosystem of Palo Alto, providing customers with a long-term vision to modify and redesign how security is applied in their company."
"I like the centralized console and the predictive analysis it does of malware. It is very stable and also scalable."
"I don't have to do much monitoring with it; I don't have to have anybody manually looking at this, it gives us reports, and it lets us know if something needs to be addressed, and we can easily address it."
"The most valuable feature of Cortex XDR by Palo Alto Networks is the low consumption of system resources. The solution uses a lot of AI and machine learning."
"Cortex XDR by Palo Alto Networks's ability to block sophisticated threats in real time is quite good and is on par with SentinelOne's."
"From the Palo Alto side, whatever they buy, they integrate that really well into their integration suite, and that makes a massive difference."
"I generally believe that Cortex XDR by Palo Alto Networks is probably the best in the market right now."
"The scalability of Cortex XDR by Palo Alto Networks is very good."
"The technical support of ESET is very good."
"The product enabled Zero-Day Protection for our environment. We never encountered any issues regarding threats."
"We can easily manage resources, disable or enable clients and update them."
"It is easy to patch, update, and set up scheduled scans."
"The solution offers a lot of configuration capabilities."
"Regarding real-time analytics and threat detection capabilities in ESET PROTECT Enterprise, I find them excellent."
"The solution doesn't have high memory usage."
"It's helped us with restrictions and knowing which users we can provide permissions to and which users we need to restrict."
"The alerting to drive investigations and remediation has been its most valuable feature, plus the ability to quickly search multiple logs makes investigations easier."
"I rate Rapid7 nine out of 10 for affordability"
"Very intuitive and easy to set up."
"The solution's initial setup is easy."
"Previously, when something happened, such as when a hacker was attacking one of our customers, we were always behind, or we did not know that we were hacked until the ransomware started, but with the Rapid7 solution, at every step, we could online see what a person was doing, and we could prevent ransomware."
"The incident case management is the most valuable feature. Even though there's always something I find I would like to add to that feature, the ability to quickly sort through all the logs, network and endpoint data, etc., and add it to an incident case as part of the investigation, is nice. Having it automatically timeline that additional data into the original incident timeline, and correlate it to other notable events and activities on the network, results in a huge improvement in our overall confidence that we've quickly traced down the right source of an issue."
"Rapid7 InsightIDR has positively impacted my organization by capturing most logs and every minute detail, including endpoint logs, network logs, and any email-related logs if a malicious link has been clicked."
"The solution provides satisfying native integration features"
 

Cons

"It's very time-consuming to log support issues and the people that answer the tickets aren't very knowledgeable."
"This is a very costly product."
"Data privacy is a matter of concern. You have to be careful with data privacy, it can be sensitive and Cortex can have most of your access."
"I feel that it should not be a licensed activity because a feature should allow us to see applications running on end devices."
"The GUI could be improved. It's a little bit cumbersome. It could be more user-friendly."
"Limited remote connection."
"There's an overall lack of features."
"We have found that there are times Cortex XDR by Palo Alto Networks does not detect some of the viruses, we have to use another protection solution called Kaspersky."
"ESET Protect could improve the performance. The performance of the home computers and laptops becomes slow due to their heavy software load. It would be a benefit to make a lighter version of the software which does not have any impact on the performance of the computer's hardware."
"They need to reduce the number of notifications on the endpoints."
"I would like to see more in managing mobile devices in an on-premise solution. The latest news I've heard is that ESET drops mobile management module development for the on-prem version. It's moving to the cloud. Like in endpoint client protection, I would also like to see more of the vulnerability management features and additional app control functionality in ESET Protect."
"In terms of management accounts, there's a lot of manuals that seem to be mixed up. Sometimes, it's a little bit confusing."
"The availability and sustainability could also be improved."
"The tool is complex and expensive."
"The solution can be quite technical and therefore is challenging for new users."
"Sometimes, the connection to the machine requires troubleshooting."
"If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is."
"Lacks a mobile application."
"I chose eight out of ten because of the analytical rules; they lack dynamic rules, and also due to the dashboard and reporting part."
"Cloud risk assessment is one area where I think they need a lot of improvement."
"The searching feature in Rapid7 InsightIDR needs to evolve"
"I'd like to be able to get the compliance report within the solution which is currently not possible."
"Sometimes, it is hard to get the right queries to use. Currently, the tool lacks a pre-made set of queries."
"They should add more configuration and security features to it."
 

Pricing and Cost Advice

"This is an expensive solution."
"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."
"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."
"Our license will require renewal in August, after which the maintenance will continue as usual."
"The solution is expensive. It's pricing is on a yearly-basis."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"Compared to CrowdStrike, Cortex XDR is an expensive solution."
"Cortex XDR by Palo Alto Networks is quite an expensive solution."
"There is a license needed to use ESET Protect. The licensing cost is very low, it is approximately $10 per license."
"The product is cost-effective compared to one of its competitors."
"ESET PROTECT Enterprise is affordable."
"​Accurately predict your licensing counts as this is a subscription based product.​"
"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."
"Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."
"It is a reasonably priced solution."
"It is more reasonably priced than other vendors."
"The pricing of the solution depends on the user. But there is a yearly licensing cost."
"Rapid7 InsightIDR charges us based on the endpoints we connect to."
"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help.​"
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
10%
Comms Service Provider
13%
Financial Services Firm
11%
Manufacturing Company
10%
Computer Software Company
9%
Manufacturing Company
9%
Financial Services Firm
9%
Comms Service Provider
7%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise54
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise2
Large Enterprise2
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise5
Large Enterprise6
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What needs improvement with ESET Protect?
One area for improvement in ESET PROTECT Enterprise is its capabilities on Mac devices, which are less functional com...
What is your primary use case for ESET Protect?
My customers use ESET PROTECT Enterprise to secure all their operating systems; we have a lot of customers who rely o...
What advice do you have for others considering ESET Protect?
I suggest that other users considering ESET PROTECT Enterprise utilize this platform to manage all their laptops and ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is a...
What is your experience regarding pricing and costs for Rapid7 InsightIDR?
My experience with pricing, setup costs, and licensing has been very positive; it is cost-effective and offers great ...
What needs improvement with Rapid7 InsightIDR?
I would say there are two areas for improvement: the reporting dashboard that provides insights or reports weekly or ...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
ESET Protect, ESET File Security
InsightIDR
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Liberty Wines, Pioneer Telephone, Visier
Find out what your peers are saying about ESET PROTECT Enterprise vs. Rapid7 InsightIDR and other solutions. Updated: June 2026.
908,800 professionals have used our research since 2012.