Try our new research platform with insights from 80,000+ expert users

Rapid7 InsightConnect vs Splunk SOAR comparison

Rapid7 and Splunk are both solutions in the Security Orchestration Automation and Response (SOAR) category. Rapid7 is ranked #19 with an average rating of 8.0, while Splunk is ranked #3 with an average rating of 8.3. Rapid7 holds a 0.9% mindshare in SOAR, compared to Splunk’s 7.6% mindshare. Additionally, 100% of Rapid7 users are willing to recommend the solution, compared to 86% of Splunk users who would recommend it.
Rapid7 InsightConnect
Read 4 Rapid7 InsightConnect reviews
  • 407 Views
  • 132 Comparison Views
100% willing to recommend
Splunk SOAR
Read 45 Splunk SOAR reviews
  • 4,002 Views
  • 1,528 Comparison Views
86% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Dec 5, 2024

Rapid7 InsightConnect and Splunk SOAR compete in the SOAR space. Rapid7 InsightConnect is noted for its user-friendly design and integration capabilities, while Splunk SOAR is often chosen for its comprehensive features and scalability.

Features: Rapid7 InsightConnect is valued for its seamless automation workflows, extensive integration options, and straightforward setup. In contrast, Splunk SOAR is recognized for robust security capabilities, powerful analytics, and extensive customization. These differences make Rapid7 suitable for organizations prioritizing ease of use and integration, while Splunk caters to those needing advanced security functionalities and customization.

Ease of Deployment and Customer Service: Rapid7 InsightConnect offers a more intuitive deployment process with strong customer service support, facilitating smoother transitions. Splunk SOAR, featuring a more complex deployment process, provides comprehensive support that helps maximize its feature-rich platform. This difference highlights Rapid7's appeal in deployment and support, while Splunk SOAR is optimal for organizations looking for extensive capabilities despite needing more involved setup.

Pricing and ROI: Rapid7 InsightConnect tends to have a more accessible price point with quicker ROI due to its straightforward implementation and efficient automation. Splunk SOAR, although higher in cost, justifies the investment with versatile functionality and extensive security features. Rapid7 may attract cost-conscious buyers, while Splunk SOAR is favored by those prioritizing comprehensive security and feature availability.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Rapid7 InsightConnect vs. Splunk SOAR Report (Updated: June 2025).
Buyer's Guide
Rapid7 InsightConnect vs. Splunk SOAR
June 2025
Download the complete report
Helped 860,592 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Rapid7 InsightConnect
Ranking in Security Orchestration Automation and Response (SOAR)
19th
Average Rating
8.0
Reviews Sentiment
7.4
Number of Reviews
4
Ranking in other categories
No ranking in other categories
Splunk SOAR
Ranking in Security Orchestration Automation and Response (SOAR)
3rd
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
45
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2025, in the Security Orchestration Automation and Response (SOAR) category, the mindshare of Rapid7 InsightConnect is 0.9%, up from 0.6% compared to the previous year. The mindshare of Splunk SOAR is 7.6%, down from 8.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Orchestration Automation and Response (SOAR)
 

Featured Reviews

Chamindu Pramodya - PeerSpot reviewer
Enables us to design workflows and integrate various processes
I design workflows and integrate various processes using Rapid7 InsightConnect. This includes integrating with value management and packaging and incorporating InsightVMware performance through Rapid7 InsightConnect The product is user-friendly. Customers are familiar with its usage. The…
Read full review
SAURABHYADAV4 - PeerSpot reviewer
Enables optimization by reducing manual intervention and increasing automation in the workflow
The product provides 100% automation for certain processes. It needs no manual intervention. We can integrate various tools like VirusTotal and ServiceNow. We can automate all the tasks. It is one of the best things about the tool. It also provides workforce protection. Whenever we get any alerts or make any configurations, we develop workflow automation using the playbooks. We can fully automate some of the security incident resolutions. We can also do identification and redirection using the product. I have integrated Splunk Phantom with Splunk Cloud. Previously, I used it with Splunk on-premise to get the logs into Splunk for tracking and audit purposes. Since Splunk is a SaaS-based product, it has certain maintenance windows. Over time, the vendor does some maintenance during off-production hours. Creating playbooks using the solution’s playbook editor is not tough. For someone who knows the solution, I rate the ease of creating playbooks as four out of five. The solution’s playbook viewer provides full visibility. The product provides different integrations. We can easily integrate the tool with VirusTotal, ServiceNow, and the asset and identity management system. The product is somewhat easier to use in an investigation. We have been able to identify the false positives using the product. The tool has helped reduce false positives by 30%. Splunk SOAR has helped reduce our mean time to detect by 10% to 15%. Splunk SOAR has a major impact on our meantime to resolve. Our mean time to resolve has been reduced by 35% to 40%. I have integrated VirusTotal with Splunk SOAR. Instead of doing manual checks, I can easily get the score by integrating the tool with Splunk SOAR. I have also synced Active Directory with the asset and identity management system. It's been a long time since we have implemented Splunk SOAR. It brings value to our organization. Before Splunk SOAR, everything was done using manual intervention. We had to educate the SOC team on how to do tasks. We also had to create playbooks for them. With Splunk SOAR, we only have to educate the team about how things are done so that they can perform a manual intervention when there is a failure, which is rare. After deploying the product, we had to provide some training to the SOC team. After getting trained, it was hands-on. Along with other Splunk solutions, Splunk SOAR provides the resilience to face any issues and hardships. We easily cope with downtimes. Splunk SOAR offers us end-to-end visibility across our environment. It depends on how much we utilize it. Visualizing and troubleshooting our cloud-native environment using Splunk SOAR is somewhat easy. I have to coordinate with the Phantom administrators if there is any issue. I work mostly on playbook development and integrating it with security instances.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Based on my user experience, I would recommend InsightConnect for its user-friendly interface and excellent documentation."
"The tool is stable. The initial setup is straightforward. The product is user-friendly."
"The fact that it's a security orchestration, automated response solution with a vast level of insights and the ability to integrate with a number of other security tools."
"InsightIDR's Attacker Behavioral Analytics (ABA) and User and Entity Behavior Analytics (UEBA) features have been very useful in maintaining our security posture."
"The most valuable feature of the solution is the playbook automation just because it allows us to reduce the manual actions that SOC has to handle."
"Workflow management is most valuable. It is easily customizable"
"Splunk integrates with so many products. It provides us with good information for us to be able to do our jobs."
"The most valuable features of Splunk SOAR are the easy integration with other solutions, including other Splunk solutions. The most important playbooks we need on the market come already on the Frontend. However, nowadays, Splunk changed its name, it's not Frontend anymore, it's Splunk Store. This is a very strong point."
"So far, the interface is very easy to use."
"Surprisingly, the mobile app is valuable because it is very convenient for our on-call analysts to respond and get alerted to security alerts and events wherever they are. We are able to harness the power of Splunk SOAR and everything that we are doing, and we are also able to alert our on-call analysts 24/7. From their mobile phone, they can respond to those alerts."
"Splunk SOAR's extensive library of pre-built integrations allows it to connect with a vast array of popular security and IT applications, streamlining workflows across our existing security stack."
"In Splunk SOAR, I find the playbooks valuable. We get to create multiple playbooks, and within each playbook, there is a different type of investigation attached to it, which helps out an analyst or new analysts coming on board."
More Splunk SOAR pros
 

Cons

"The GUI needs improvement, as creating workflows can be cumbersome. More updated plugins are needed to leverage existing functionalities, such as APIs for functions like blocking malicious IPs in FortiGate."
"The technical support should be improved."
"The GUI needs improvement, as creating workflows can be cumbersome."
"I haven't used it fully, but based on my usage, I could not find simulation tools and features. It currently lacks simulation features, which are important for me for creating a playbook. It is also very expensive for my region."
"What we have seen is if the workflow gets halted or if we want to halt a workflow, it cannot be resumed."
"The UI can be more customizable for the clients."
"SOAR is probably the most unreliable product Splunk has and that's because most of it is content driven from what you put into it. There are certain parts of it that have a little bit of difficulty at volume too. It's always changing. There is new stuff coming out for it that's going to make it a little bit better, but it does have some drawbacks."
"Some of the training materials are on a basic level."
"We've run into a few minor issues. Some of the playbook writing is a bit complicated. We've had a few hiccups with the source control. We'd really like to use GitHub deployment keys for a dedicated account. We haven't been able to do that. I think those are some of the major ones."
"It would be ideal if we could automate processes even more."
"Providing Splunk app developers and playbook developers Python Stub files so that way when they create custom code through their IDE, they can have IntelliCode suggestions."
More Splunk SOAR cons
 

Pricing and Cost Advice

Information not available
"In my opinion, the price is high, but if you want good products, you have to be willing to pay for them."
"It's very overpriced because it is based on the number of users. There is no bulk licensing."
"We renewed it this year. This year was the first time there was a dramatic increase in the price. It was kind of non-negotiable. It was just a high increase. We had internal communications, and it was definitely a surprise to us. In a short time frame, we renewed it this year. Prices are going up everywhere, but they are not always justifiable, at least not to our eyes. The pricing this year was definitely a big shock."
"I don't know the exact price, but for my region, it is very expensive."
"While I can't confirm the exact pricing, some colleagues have mentioned that Splunk SOAR may be on the costlier side."
"When we first purchased our Splunk SOAR license, it was based on an event-count model. It was based on the number of events. I had strong opinions at the time that automation should not be stifled by the amount of automation you can accomplish, so the previous structure was not as beneficial for us. Later that year, we got told or saw at a conference that they announced user-based pricing. We are now in a renewal period, so we migrated to a user-based license model, which is more appropriate for us so that we no longer have to worry about stifling our automation based on the quantity."
"Splunk SOAR is an expensive solution for an organization of our size."
"I found the price of Splunk SOAR to be good."
More Splunk SOAR pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.
See recommendations
860,592 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Financial Services Firm
9%
Healthcare Company
8%
University
7%
Computer Software Company
14%
Financial Services Firm
12%
Manufacturing Company
11%
University
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Rapid7 InsightConnect?
Compared to other SOAR solutions, the pricing is reasonable as Rapid7 provides it as a bundle called InsightIDR Ultimate, with unlimited workflows.
See all answers
What needs improvement with Rapid7 InsightConnect?
The GUI needs improvement, as creating workflows can be cumbersome. More updated plugins are needed to leverage existing functionalities, such as APIs for functions like blocking malicious IPs in F...
See all answers
What is your primary use case for Rapid7 InsightConnect?
We are using Rapid7 InsightConnect in a partner model, operating as a service provider. We buy licenses under World Data Direct and distribute them internally, acting as an MSSP.
See all answers
What do you like most about Splunk Phantom?
Splunk SOAR's quick response to incidents is the most valuable part.
See all answers
What is your experience regarding pricing and costs for Splunk Phantom?
Splunk SOAR is moderately priced, neither cheap nor overly expensive.
See all answers
What needs improvement with Splunk Phantom?
There are areas in Splunk SOAR that have room for improvement. To make Splunk SOAR a better solution, there could be better built-in debugging tools, smarter playbook suggestions, and enhanced life...
See all answers
 

Comparisons

Microsoft Sentinel vs Rapid7 InsightConnect Logo
Microsoft Sentinel vs Rapid7 InsightConnect
Compared 36% of the time
Palo Alto Networks Cortex XSOAR vs Rapid7 InsightConnect Logo
Palo Alto Networks Cortex XSOAR vs Rapid7 InsightConnect
Compared 26% of the time
Fortinet FortiSOAR vs Rapid7 InsightConnect Logo
Fortinet FortiSOAR vs Rapid7 InsightConnect
Compared 21% of the time
Swimlane vs Rapid7 InsightConnect Logo
Swimlane vs Rapid7 InsightConnect
Compared 17% of the time
More Rapid7 InsightConnect Competitors
Palo Alto Networks Cortex XSOAR vs Splunk SOAR Logo
Palo Alto Networks Cortex XSOAR vs Splunk SOAR
Compared 18% of the time
Cortex XSIAM vs Splunk SOAR Logo
Cortex XSIAM vs Splunk SOAR
Compared 16% of the time
Fortinet FortiSOAR vs Splunk SOAR Logo
Fortinet FortiSOAR vs Splunk SOAR
Compared 11% of the time
ServiceNow Security Operations vs Splunk SOAR Logo
ServiceNow Security Operations vs Splunk SOAR
Compared 9% of the time
Tines vs Splunk SOAR Logo
Tines vs Splunk SOAR
Compared 9% of the time
More Splunk SOAR Competitors
 

Product Reports

Buyer's Guide
Security Orchestration Automation and Response (SOAR)
June 2025
Rapid7 InsightConnect reportDownload Rapid7 InsightConnect product report
Buyer's Guide
Splunk SOAR
June 2025
Splunk SOAR reportDownload Splunk SOAR product report
 

Also Known As

Rapid7 Insight Connect, Komand
Phantom
 

Overview

With InsightConnect, your team will get more done and respond to security events faster than ever before. And with significant time savings and productivity gains across overall security operations, you’ll go from overwhelmed to operating at maximum efficiency in no time flat.

Rapid7

Splunk SOAR offers features like automation and orchestration of manual tasks, speeding up work, detection and response to advanced and emerging threats. 

Go from overwhelmed to in-control

Automate manual tasks. Address every alert, every day. Establish repeatable procedures that allow security analysts to stop being reactive and focus on mission-critical objectives to protect your business.

Force multiply your team

Orchestrate and automate repetitive tasks, investigation and response to increase efficiency and productivity, and do more with the people you already have. Make a team of three feel like a team of 10.

From 30 minutes to 30 seconds

Work faster with Splunk SOAR. Respond to threats in seconds. Lower your mean time to respond (MTTR) by automating security tasks and workflows across all of your security tools.

End-to-end security operations made easy

Take advantage of Splunk Enterprise Security and Splunk SOAR joining forces to provide a seamless and intuitive SecOps platform to prevent, detect and respond to advanced and emerging threats.

Splunk
 

Sample Customers

Starr Companies, Landmark Health
Recorded Future, Blackstone
Buyer's Guide
Rapid7 InsightConnect vs. Splunk SOAR
June 2025
Free Report: Rapid7 InsightConnect vs. Splunk SOAR
Find out what your peers are saying about Rapid7 InsightConnect vs. Splunk SOAR and other solutions. Updated: June 2025.
DOWNLOAD NOW
860,592 professionals have used our research since 2012.
See our Rapid7 InsightConnect vs. Splunk SOAR report.

We monitor all Security Orchestration Automation and Response (SOAR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.