Try our new research platform with insights from 80,000+ expert users

Intercept X Endpoint vs Rapid7 InsightIDR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Intercept X Endpoint
Ranking in Endpoint Detection and Response (EDR)
11th
Ranking in Extended Detection and Response (XDR)
11th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
106
Ranking in other categories
Endpoint Protection Platform (EPP) (10th), ZTNA (8th), Managed Detection and Response (MDR) (7th), Ransomware Protection (3rd)
Rapid7 InsightIDR
Ranking in Endpoint Detection and Response (EDR)
26th
Ranking in Extended Detection and Response (XDR)
17th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
32
Ranking in other categories
Security Information and Event Management (SIEM) (14th), User Entity Behavior Analytics (UEBA) (5th), Threat Deception Platforms (5th)
 

Mindshare comparison

As of August 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Intercept X Endpoint is 1.8%, down from 3.4% compared to the previous year. The mindshare of Rapid7 InsightIDR is 1.2%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR)
 

Featured Reviews

Suwandhi Suraweera - PeerSpot reviewer
Offers advanced filtering features and benefits from improved licensing and performance
There is a licensing issue with Intercept X Endpoint. Their licenses are user-based. Most of our customers use per device licenses, and they need per device licenses because they use one PC for multiple accounts. This creates a problem. There was one customer who complained about the slowness of PCs using Intercept X Endpoint. They use minor performance PCs, which causes their PCs to become slow.
Asim Naeem - PeerSpot reviewer
Providing comprehensive insight into alerts while working towards AI enhancement
I definitely recommend Rapid7 InsightIDR. It is becoming better, with improvements being continuously made to the product. Right now, I do not have any advice about Rapid7 for other users because every organization or user has different criteria or multiple use cases, so I refrain from commenting on that. I rate the overall solution seven out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is the CryptoGuard in Sophos. In a case of a ransomware attack, this feature comes into action to protect us."
"The most valuable features are ease of use and the GUI."
"The Managed Detection and Response service provided by Intercept X Endpoint is highly valuable. With a team of 600-700 individuals monitoring systems, they swiftly respond to attacks, either informing us to isolate or directly removing threats. This full MDR service is especially recommended for sectors like finance, where data security is critical. The deep learning technology within Intercept X Endpoint enhances our security posture by analyzing behaviors and algorithms to differentiate between legitimate users and threats, effectively preventing attacks on our network infrastructure."
"Very stable solution."
"It is easy to change the size of its capabilities, i.e. to expand processes or scale the size of users."
"It is stable and has a good price. I find it very good."
"Scalability is good."
"The most valuable feature of Sophos Intercept X is cloud management."
"We were able to identify criminals attempting to login from China and put a stop on their IP locations."
"The product works well. Stability-wise, I rate the solution a ten out of ten."
"Simple configuration and automatically syncs to the cloud platform."
"Very intuitive and easy to set up."
"It improved my organization by building a security alerting program."
"The solution is very stable and works very well for what I need it to do."
"If you were on other solutions, you would notice that they use agents from third-party, from open-source, from a native OS, or from other tools. Here, however, it is an agent from Rapid7 itself. This adds to the solution's overall capabilities."
"Integration with threat modeling from the Metasploit and InsightIDR repositories."
 

Cons

"We tried to set up Sophos Zero Trust within my Sophos central cloud. It only works with Microsoft and I use Google. I'd like to see Google added."
"Intercept X Endpoint sometimes slows down machines due to high CPU utilization and significant RAM consumption during scanning."
"The detection and the AI capabilities should be improved upon."
"It should offer better security updates."
"They don't have the full stack of offerings as compared to the other competitive products that we see."
"We had some initial problems with our deployment, and they were more around uninstalling Sophos Basic and installing Sophos Intercept X. We had some challenges with some of the uninstallation scripts. They can improve the deployment of Sophos Intercept X when there is already an existing Sophos version. They can also provide more information in the form of best practices and lessons learned from previous findings. A knowledge base with this type of information would be helpful."
"It would be a value-add if they can include integration with other technologies or solutions, like Fortinet, Blue Coat, etc."
"There is some issue with the reporting and refreshing information on resources that have been eliminated."
"There are certain limitations with Rapid7 that I am working on."
"It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required."
"The product allows us to make only 30 custom rules."
"Cloud risk assessment is one area where I think they need a lot of improvement."
"I feel it would greatly benefit from more supported log sources."
"Rapid7 InsightIDR is not intuitive to search for logs. It should be more user-friendly and improve the dashboards. We should be able to use ready-made templates instead of having to build one."
"Inability to get access to compliance reports within the solution."
"There is a future in AI with Rapid7, however, it is not fully operated. There are certain limitations with Rapid7 that I am working on."
 

Pricing and Cost Advice

"I have found the price of Sophos Intercept X to be reasonable."
"We are happy with the pricing across all Sophos products."
"On a per-user basis, my company has to pay a certain amount of money."
"The price of this solution is reasonable."
"The pricing is quite expensive compared to the rest. I would rate the pricing a four out of ten; one is expensive, and ten is cheap."
"It was fairly and reasonably priced."
"The pricing is average for software like this, but you can purchase additional services if you wish."
"There is a license required to use this solution."
"Rapid7 InsightIDR charges us based on the endpoints we connect to."
"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."
"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help.​"
"The pricing and licensing are competitive."
"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."
"The pricing is good, and it is not very expensive."
"​Accurately predict your licensing counts as this is a subscription based product.​"
"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
865,295 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Comms Service Provider
7%
Manufacturing Company
7%
Financial Services Firm
6%
Computer Software Company
15%
Manufacturing Company
8%
Financial Services Firm
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Crodwstrike Falcon compare with Sophos Intercept X?
I like that Crowdstrike Falcon allows me to easily correlate data between my firewalls. Its detection and machine learning are very valuable features. Crowdstrike Falcon also successfully prevents ...
What is your experience regarding pricing and costs for Sophos Intercept X?
I would describe it as economical, but not much cheaper than other solutions.
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What do you like most about Rapid7 InsightIDR?
During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...
 

Also Known As

Sophos Intercept X
InsightIDR
 

Overview

 

Sample Customers

Flexible Systems
Liberty Wines, Pioneer Telephone, Visier
Find out what your peers are saying about Intercept X Endpoint vs. Rapid7 InsightIDR and other solutions. Updated: July 2025.
865,295 professionals have used our research since 2012.