Try our new research platform with insights from 80,000+ expert users

Google Chronicle Suite vs Rapid7 InsightIDR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Google Chronicle Suite
Ranking in Security Information and Event Management (SIEM)
10th
Average Rating
7.8
Reviews Sentiment
7.0
Number of Reviews
16
Ranking in other categories
No ranking in other categories
Rapid7 InsightIDR
Ranking in Security Information and Event Management (SIEM)
14th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
32
Ranking in other categories
User Entity Behavior Analytics (UEBA) (8th), Endpoint Detection and Response (EDR) (23rd), Threat Deception Platforms (4th), Extended Detection and Response (XDR) (18th)
 

Mindshare comparison

As of February 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Google Chronicle Suite is 1.8%, down from 3.4% compared to the previous year. The mindshare of Rapid7 InsightIDR is 2.1%, down from 2.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Google Chronicle Suite1.8%
Rapid7 InsightIDR2.1%
Other96.1%
Security Information and Event Management (SIEM)
 

Featured Reviews

Viney Bhardwaj - PeerSpot reviewer
Director at a consultancy with 10,001+ employees
Has required significant customization but has supported threat pattern discovery and AI-driven analytics
The integration of Google Chronicle Suite with existing SIEM systems needs to be more mature, so some customization is required. With custom applications, it's quite difficult, and they need to work on this. The automated threat detection features in Google Chronicle Suite come with a lot of false positives and noise. They are new to the market and need to improve significantly. Customization is vital where users can customize the alerts, dashboard, or content as per their needs. This is more required in Google Chronicle Suite, allowing analysts or engineers to create according to the organization. They need to provide cheaper options for online versus offline log storage and improve retention and compression of the logs. Especially searching offline logs is a feature missing from most SIEM solutions nowadays.
SohailHyder - PeerSpot reviewer
Head Of Cyber Security at Super Secure
Has supported compliance needs for mid-sized organizations but lacks customization and advanced integration
If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is. This is where it can improve if we keep in front the feature sets of a complete SIEM solution. Most common in the market is QRadar, but it is depleting now. It has been taken over by some other products such as Splunk and LogRhythm. If we compare these things with Rapid7 InsightIDR, then there are definitely some gaps that need to be filled. Data retention is also one concern because Rapid7 InsightIDR is cloud-based and operates on a subscription model. Whatever data you want to retain, it has to be paid for separately or it has a cost. Other solutions that are on-premises can have their own infrastructure or they provide some data retention for a month or in some capacity-wise, they provide that solution to them which makes them more attractive.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The automated response feature allows for immediate actions like isolating infected machines or blocking malicious IP addresses."
"The log folder is fairly simple."
"The initial setup is straightforward and not complex."
"The technical support from Google is very important and great."
"The dashboards are clean and clearly written, making it easy to use and understand."
"The product's most valuable feature is threat hunting. We can detect the threats directly from the console from the past data as well."
"The support team is responsive."
"The tool's most valuable feature is the search option, allowing easy navigation."
"Great coverage of all systems within our network from endpoint to firewall."
"I definitely recommend Rapid7 InsightIDR."
"InsightIDR has allowed us to find potential security issues that we did not know existed, and get remediation quickly."
"It improves because several sensors are deployed within the on-premise environment. It can be very efficient if the customer implements and operates it effectively."
"Another very important part of insightIDR is the ability to collect data from endpoint devices via agent software. With a large remote workforce, this allows visibility into the endpoints that are connected to the internet, but not to the corporate network."
"Very intuitive and easy to set up."
"I have seen that Rapid7 InsightIDR provides security to the networks and endpoints in the company."
"The ability to ingest Office 365 log files, then process them into events and display them on a map."
 

Cons

"The tool needs to improve tasking packages. Its GUI needs to be improved. The product needs to include time-based filtration. We can only see the alert detection timeline now."
"The tool is a little bit difficult to use compared to Microsoft Sentinel."
"The tool is complicated for a first-time user. It should also include newer APIs."
"A few areas are difficult to understand for someone who has less experience using the product."
"The configuration is not optimal."
"It is still not mature enough."
"Google Chronicle Suite lacks near time detection. There is a delay of about twenty minutes between logs coming in and an alert being generated. This timeframe, while seemingly short, can have significant implications in the event of a critical issue."
"They are slow, and the initial responses often require more information rather than providing helpful solutions."
"One thing that springs to mind is easier API integration with ITSMs. We are evaluating a new ITSM and I would like to have InsightIDR create a ticket when an attack is identified, and the ticket would be closed in InsightIDR when the ITSM resolution is completed. This would take out the "single point of failure" we currently have, if the email recipient is somehow absent, in recording the risk appetite for the incident and the actions taken to mitigate or not."
"InsightIDR's integration with other solutions could be improved. Also, I'd like more control from the portal over what's happening on the endpoint side. For example, when I see an attack on an endpoint, I want to be able to stop it from the portal."
"One of the things that could be better is digital forensics. It is there, but it can be better. They could provide more on the endpoint detection level."
"It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required."
"I feel it would greatly benefit from more supported log sources."
"The reporting is the weakest aspect. There needs to be multi-level grouping for events (for example, group by user and destination). Right now, we can do a group by user and a separate table or group by destination. But I'd be more interested in where a person was logging into instead of who was logging in or where he was logging in."
"The dashboard is an area that could be simplified."
"The product allows us to make only 30 custom rules."
 

Pricing and Cost Advice

"We have to pay extra charges for the amount of data transfer and technical support services."
"The solution's pricing is dependent on the data amount."
"The tool is cheaper than Microsoft Sentinel."
"Compared to other solutions, Google Chronicle Suite's pricing is fine."
"The pricing and licensing are competitive."
"It is more reasonably priced than other vendors."
"The solution has a mid-range price point in the market"
"Rapid7 InsightIDR is priced very well and is cost-effective."
"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."
"Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."
"The pricing is good, and it is not very expensive."
"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
881,733 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
10%
Retailer
7%
Computer Software Company
12%
Financial Services Firm
9%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise1
Large Enterprise6
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise5
Large Enterprise6
 

Questions from the Community

What do you like most about Google Chronicle Suite?
Google Chronicle Suite is a highly scalable solution with good search capabilities.
What is your experience regarding pricing and costs for Google Chronicle Suite?
Our license is based on the size of the company with an all-you-can-eat model, considering storage capabilities per day. It's a flexible pay method.
What needs improvement with Google Chronicle Suite?
The integration of Google Chronicle Suite with existing SIEM systems needs to be more mature, so some customization is required. With custom applications, it's quite difficult, and they need to wor...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What do you like most about Rapid7 InsightIDR?
During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...
 

Also Known As

No data available
InsightIDR
 

Overview

 

Sample Customers

Information Not Available
Liberty Wines, Pioneer Telephone, Visier
Find out what your peers are saying about Google Chronicle Suite vs. Rapid7 InsightIDR and other solutions. Updated: February 2026.
881,733 professionals have used our research since 2012.