Try our new research platform with insights from 80,000+ expert users

Intercept X Endpoint vs Rapid7 InsightIDR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Intercept X Endpoint
Ranking in Endpoint Detection and Response (EDR)
13th
Ranking in Extended Detection and Response (XDR)
12th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
106
Ranking in other categories
Endpoint Protection Platform (EPP) (12th), ZTNA (9th), Managed Detection and Response (MDR) (7th), Ransomware Protection (3rd)
Rapid7 InsightIDR
Ranking in Endpoint Detection and Response (EDR)
25th
Ranking in Extended Detection and Response (XDR)
17th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
32
Ranking in other categories
Security Information and Event Management (SIEM) (14th), User Entity Behavior Analytics (UEBA) (5th), Threat Deception Platforms (4th)
 

Mindshare comparison

As of October 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Intercept X Endpoint is 1.8%, down from 2.7% compared to the previous year. The mindshare of Rapid7 InsightIDR is 1.2%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Market Share Distribution
ProductMarket Share (%)
Intercept X Endpoint1.8%
Rapid7 InsightIDR1.2%
Other97.0%
Endpoint Detection and Response (EDR)
 

Featured Reviews

Suwandhi Suraweera - PeerSpot reviewer
Offers advanced filtering features and benefits from improved licensing and performance
There is a licensing issue with Intercept X Endpoint. Their licenses are user-based. Most of our customers use per device licenses, and they need per device licenses because they use one PC for multiple accounts. This creates a problem. There was one customer who complained about the slowness of PCs using Intercept X Endpoint. They use minor performance PCs, which causes their PCs to become slow.
Asim Naeem - PeerSpot reviewer
Providing comprehensive insight into alerts while working towards AI enhancement
I definitely recommend Rapid7 InsightIDR. It is becoming better, with improvements being continuously made to the product. Right now, I do not have any advice about Rapid7 for other users because every organization or user has different criteria or multiple use cases, so I refrain from commenting on that. I rate the overall solution seven out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is one of the best in terms of technicality."
"Intercept X's smart prevention it's very good as so are its machine learning capabilities for troubleshooting channels and files."
"The most valuable features are the anti-ransomware engine, deep learning, web filtering, and the cloud manageability."
"Sophos Intercept X is a complete endpoint solution."
"After that, the client switched to Sophos to get the protection they lacked. It either works or it doesn’t and Sophos works."
"This is really good because it's applicable to zero-day threats."
"The thing that I like about it is the synchronized security. You can tie endpoint protection and firewalls and a whole range of other services and products. You can get your servers taken in under this."
"The pricing is fair. It's not too costly for our small organization."
"Dashboards, including the main screen, provide much-needed information at a glance, without hours of coding and sifting through logs to find it. In case of an actual security incident, I have faith that insightIDR has retained all logs in a secure manner that prevents log tampering as well."
"The alerting to drive investigations and remediation has been its most valuable feature.​"
"Very intuitive and easy to set up."
"The biggest reason why we chose Rapid7 was to gain value in a really quick time. Its deployment doesn't take months. It just takes a few days."
"Simple configuration and automatically syncs to the cloud platform."
"The platform offers unlimited storage and agent-based solutions."
"Scalability-wise, I rate the solution a ten out of ten. As a cloud tool, the product is highly scalable."
"We were able to identify criminals attempting to login from China and put a stop on their IP locations."
 

Cons

"I have not done it, but integrating it with authenticating the users on the Windows system looks a bit complicated to me. It could be because I don't understand it."
"The cloud management console could be a little more user-friendly."
"The choices offered for the on-premises and cloud-based platforms are the reverse of each other."
"The tool should be made compatible with Linux and Microsoft operating systems."
"The solution's pricing could be better."
"We tried to set up Sophos Zero Trust within my Sophos central cloud. It only works with Microsoft and I use Google. I'd like to see Google added."
"They need to focus on their SLA or technical support. They also need to focus on their UI. They should also improve their content filtering tool and update it so that correct categories are there. Sometimes, when I want to block an online gaming website, it is not shown under the correct category. It is shown under another category. They need to review their content filtering tool on a bi-weekly or monthly basis and update the sites and categories. This will be really helpful for them."
"The initial setup can be a bit challenging."
"Inability to get access to compliance reports within the solution."
"They should add more configuration and security features to it."
"I would like the ability to adjust the threshold of certain existing alerts. Currently the only option is to change the notifications or create my own alert."
"One of the things that could be better is digital forensics. It is there, but it can be better. They could provide more on the endpoint detection level."
"Needs a better ability to customize the check within the console."
"Sometimes, it is hard to get the right queries to use. Currently, the tool lacks a pre-made set of queries."
"One thing that springs to mind is easier API integration with ITSMs. We are evaluating a new ITSM and I would like to have InsightIDR create a ticket when an attack is identified, and the ticket would be closed in InsightIDR when the ITSM resolution is completed. This would take out the "single point of failure" we currently have, if the email recipient is somehow absent, in recording the risk appetite for the incident and the actions taken to mitigate or not."
"The main problem lies in the processes within the client's operating systems."
 

Pricing and Cost Advice

"We have an annual subscription."
"We are happy with the pricing across all Sophos products."
"They offer both monthly and yearly licenses."
"You can purchase a license for one to three years."
"The price of the product is okay, in my opinion. The tool's cost per user and per annum basis is around INR 700 to 800."
"We have bought a three-year license."
"When you start going to the EDR technologies and the MTR, it is a little bit expensive. It's a very good technology, and obviously, you're going to pay for it, but the pricing could do a little bit of work."
"The price of Sophos Intercept X is competitive."
"​Accurately predict your licensing counts as this is a subscription based product.​"
"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help.​"
"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."
"The pricing and licensing are competitive."
"It is a reasonably priced solution."
"Rapid7 InsightIDR charges us based on the endpoints we connect to."
"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."
"The pricing of the solution depends on the user. But there is a yearly licensing cost."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
868,787 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Comms Service Provider
7%
Manufacturing Company
7%
Financial Services Firm
5%
Computer Software Company
14%
Financial Services Firm
8%
Manufacturing Company
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business72
Midsize Enterprise22
Large Enterprise21
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise5
Large Enterprise6
 

Questions from the Community

How does Crodwstrike Falcon compare with Sophos Intercept X?
I like that Crowdstrike Falcon allows me to easily correlate data between my firewalls. Its detection and machine learning are very valuable features. Crowdstrike Falcon also successfully prevents ...
What is your experience regarding pricing and costs for Sophos Intercept X?
I would describe it as economical, but not much cheaper than other solutions.
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What do you like most about Rapid7 InsightIDR?
During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...
 

Also Known As

Sophos Intercept X
InsightIDR
 

Overview

 

Sample Customers

Flexible Systems
Liberty Wines, Pioneer Telephone, Visier
Find out what your peers are saying about Intercept X Endpoint vs. Rapid7 InsightIDR and other solutions. Updated: September 2025.
868,787 professionals have used our research since 2012.