No more typing reviews! Try our Samantha, our new voice AI agent.

Fortinet FortiSIEM vs Rapid7 InsightIDR comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiSIEM
Ranking in Security Information and Event Management (SIEM)
15th
Average Rating
7.6
Reviews Sentiment
6.2
Number of Reviews
75
Ranking in other categories
AI Observability (26th)
Rapid7 InsightIDR
Ranking in Security Information and Event Management (SIEM)
22nd
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
33
Ranking in other categories
User Entity Behavior Analytics (UEBA) (11th), Endpoint Detection and Response (EDR) (32nd), Threat Deception Platforms (6th), Extended Detection and Response (XDR) (20th)
 

Mindshare comparison

As of November 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Fortinet FortiSIEM is 2.2%, down from 3.4% compared to the previous year. The mindshare of Rapid7 InsightIDR is 2.3%, down from 2.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Fortinet FortiSIEM2.2%
Rapid7 InsightIDR2.3%
Other95.5%
Security Information and Event Management (SIEM)
 

Featured Reviews

SY
Network Engineer at Ogma Consulting
Comprehensive monitoring boosts security, yet incident management features need expansion
Fortinet FortiSIEM should broaden its remediation part to include more features for incident management. Currently, to manage repetitive incidents or for remediation, I need to use a separate software called FortiSOAR. Additionally, the search functionality in FortiAI should be improved to provide more precise results, making it easier for me to understand what actions need to be taken.
Prajwal Chougale - PeerSpot reviewer
SOC L2 Analyst at a tech services company with 51-200 employees
Centralized threat hunting has improved alert accuracy and simplifies incident investigations
I would say there are two areas for improvement: the reporting dashboard that provides insights or reports weekly or monthly lacks detailed information about how logs are being ingested. While the details are there, they could be more concise and easier to understand for any level of authority. The second area is alert tuning; compared to Microsoft Sentinel, Rapid7 InsightIDR provides fewer alerts with more static alert functionality and lacks dynamic alerting exposures. There could be improvements to learn from past alert activities for more dynamic alert configurations. These two areas are the main areas for improvement; everything else is good.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best features are the dashboard and the integration between the Fortinet products, and if you use them together with FortiSOAR and FortiAnalyzer, it's better than Splunk."
"The stability is very reliable. It offers very good performance."
"The most valuable features of the solution is its integration with other technologies, especially its ability to collect logs from Cisco and Aruba devices along with Fortinet products."
"The most valuable feature is the ability to view all the network events on a single pane and find the point of contact or point of the incident."
"FortiSIEM provides a single PIN to monitor SOC and NOC. It's a nice tool for integration and monitoring. It provides multiple categories for monitoring based on security designations like low, medium, and high."
"Scalability is very good."
"The solution has an all-in-one approach, where we buy one product and everything our customer needs is included, without additional licenses for more functionality, and any adjustments are done very quickly and easily."
"FortiSIEM allows you to match IPs with threat intelligence feeds from sources like Kaspersky or Anomali, adding valuable context."
"The solution's initial setup is easy."
"Intelligent alerting to avoid the common problem of alert fatigue associated with traditional SIEMs."
"They can subscribe to Rapid7 because it is more valuable and delivers a greater return on investment."
"Rapid7 is easy to use and deploy. It is a simple solution and has easy data pulling."
"This is a great product and the team is very willing to work with companies."
"Log search allows us to dive deep into aggregated logs and query all event types at once.​"
"We were able to identify criminals attempting to login from China and put a stop on their IP locations."
"I like the tool's user analysis feature."
 

Cons

"The only drawback is the licensing model. It can get expensive if you want to integrate more solutions."
"Customer support service could be better."
"There could be improvements like introducing some solutions directly into FortiSIEM to avoid the need for separately purchasing additional tools like FortiStore."
"Their technical support is horrible. By horrible, I mean a train wreck of a disaster that has fallen off a bridge and caught fire."
"The way that upgrades are handled could be a bit cleaner."
"They should enhance the solution's AI capabilities, including XDR and EDR."
"Not very good on non-API features, lacks that functionality."
"Creating parsers to try make unknown events or currently unsupported devices produce meaningful information is extremely cumbersome."
"The product allows us to make only 30 custom rules."
"It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required."
"Customised alert recipients need to be added to allow better first-line action and quicker response. Configurable honeypots would be a welcome addition."
"Rapid7 InsightIDR is not intuitive to search for logs. It should be more user-friendly and improve the dashboards. We should be able to use ready-made templates instead of having to build one."
"The dashboard is an area that could be simplified. For management, it should be clear and the files should be there."
"Rapid7 doesn't integrate well with all our security tools from various vendors, so we plan to switch. Many of our solutions work with Rapid7, but some do not. We are already searching for a replacement already."
"Rapid7's customer support is awful. They didn't respond at all."
"InsightIDR is only available in a cloud version. Some of our customers prefer an on-prem solution because they want to manage the security within their environment."
 

Pricing and Cost Advice

"We bought the perpetual license, so we own the product, but there is a three-year support renewal fee for that."
"Fortinet FortiSIEM is not an expensive solution."
"The price of Fortinet FortiSIEM was reasonable compared to other solutions."
"They have a yearly subscription."
"If one is cheap and ten is expensive. I rate the tool's price as an eight out of ten. Compared with Splunk or Oracle, Fortinet is cheap."
"This is probably more on the lower cost end of the spectrum compared to competing products. Fortinet's license model is based on events per second, which makes sense, but that's not typical. It makes it very hard to calculate what your costs are going to be as you scale the platform because some log sources, such as firewall logs, are very noisy, and there are lots and lots of events per second, but some of them are not. So, it becomes a bit of a science experiment trying to guess what your costs are going to be as you scale the solution. This is where other competing products perhaps have a more straightforward license model."
"Manageable, however would be better as pay as you go versus CapEX."
"Its price can be better. We are Fortinet partners, so we can get discounts, but its price can be an issue at the beginning for others. There is a licensing scheme for every case. There are three licensing schemes that we can choose from."
"​I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability.​"
"It is more reasonably priced than other vendors."
"Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs."
"Rapid7 InsightIDR is priced very well and is cost-effective."
"Rapid7 InsightIDR charges us based on the endpoints we connect to."
"It is a reasonably priced solution."
"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."
"​Accurately predict your licensing counts as this is a subscription based product.​"
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
11%
Comms Service Provider
10%
Financial Services Firm
8%
Construction Company
8%
Manufacturing Company
10%
Financial Services Firm
9%
Comms Service Provider
8%
Outsourcing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business34
Midsize Enterprise22
Large Enterprise24
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise5
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for Fortinet FortiSIEM?
My experience with pricing, setup cost, and licensing for Fortinet FortiSIEM is wonderful, as it offers an excellent license compared to other vendors.
What needs improvement with Fortinet FortiSIEM?
Fortinet FortiSIEM is great overall. Performance could be enhanced, but I do not wish to elaborate on needed improvements.
What is your primary use case for Fortinet FortiSIEM?
My main use case for Fortinet FortiSIEM is building a SOC and serving as an event management platform for correlating events in my work. I use Fortinet FortiSIEM for event correlation by building a...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is your experience regarding pricing and costs for Rapid7 InsightIDR?
My experience with pricing, setup costs, and licensing has been very positive; it is cost-effective and offers great value for the money. We bought the licensing through an agent, and the setup was...
What needs improvement with Rapid7 InsightIDR?
I would say there are two areas for improvement: the reporting dashboard that provides insights or reports weekly or monthly lacks detailed information about how logs are being ingested. While the ...
 

Also Known As

FortiSIEM, AccelOps
InsightIDR
 

Overview

 

Sample Customers

FortiSIEM has hundreds of customers worldwide in markets including managed services, technology, financial services, healthcare, and government. Customers include Aruba Networks, Compushare, Port of San Diego, Cleveland Indians, Infoblox, Healthways, and Referentia.
Liberty Wines, Pioneer Telephone, Visier
Find out what your peers are saying about Fortinet FortiSIEM vs. Rapid7 InsightIDR and other solutions. Updated: September 2026.
920,929 professionals have used our research since 2012.