Try our new research platform with insights from 80,000+ expert users

Rapid7 InsightConnect vs Splunk SOAR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Rapid7 InsightConnect
Ranking in Security Orchestration Automation and Response (SOAR)
19th
Average Rating
8.0
Reviews Sentiment
7.4
Number of Reviews
4
Ranking in other categories
No ranking in other categories
Splunk SOAR
Ranking in Security Orchestration Automation and Response (SOAR)
3rd
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
46
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2025, in the Security Orchestration Automation and Response (SOAR) category, the mindshare of Rapid7 InsightConnect is 1.1%, up from 0.6% compared to the previous year. The mindshare of Splunk SOAR is 7.8%, down from 8.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Orchestration Automation and Response (SOAR)
 

Featured Reviews

Chamindu Pramodya - PeerSpot reviewer
Enables us to design workflows and integrate various processes
I design workflows and integrate various processes using Rapid7 InsightConnect. This includes integrating with value management and packaging and incorporating InsightVMware performance through Rapid7 InsightConnect The product is user-friendly. Customers are familiar with its usage. The…
Hamada Elewa - PeerSpot reviewer
Playbook complexity challenges integration but customization enables professional operation
We work with Splunk SOAR from a security perspective, focusing on User Behavior Analytics (UBA) and Security Orchestration, Automation, and Response (SOAR) The customization of the playbook in Splunk SOAR is very beneficial. After building the playbook, it operates professionally. There is an AI…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"InsightIDR's Attacker Behavioral Analytics (ABA) and User and Entity Behavior Analytics (UEBA) features have been very useful in maintaining our security posture."
"The fact that it's a security orchestration, automated response solution with a vast level of insights and the ability to integrate with a number of other security tools."
"Based on my user experience, I would recommend InsightConnect for its user-friendly interface and excellent documentation."
"The tool is stable. The initial setup is straightforward. The product is user-friendly."
"The customization continues to be excellent."
"The solution allows us to customize playbooks and incorporate custom code, allowing us to drag and drop elements while still writing code to build the integrations we need."
"The most valuable features of Splunk SOAR are the easy integration with other solutions, including other Splunk solutions. The most important playbooks we need on the market come already on the Frontend. However, nowadays, Splunk changed its name, it's not Frontend anymore, it's Splunk Store. This is a very strong point."
"Scalability is the best feature of the solution."
"Splunk has many features that make work easier, and it's simple to implement in a large production environment. Splunk collects a massive amount of data from cloud servers and handles it perfectly."
"The most valuable feature is the API connector, depending on how it's formatted and who made the actual app offering for it. The REST API is my favorite component. It's very easy to use. The filters are also really valuable. Those are the two primary features but I enjoy using the rest of it."
"Splunk integrates with so many products. It provides us with good information for us to be able to do our jobs."
"The best feature in Splunk SOAR is the visual Playbook Editor. The drag-and-drop interfaces make visualizations and understanding workflows easy."
 

Cons

"The technical support should be improved."
"The GUI needs improvement, as creating workflows can be cumbersome."
"The GUI needs improvement, as creating workflows can be cumbersome. More updated plugins are needed to leverage existing functionalities, such as APIs for functions like blocking malicious IPs in FortiGate."
"Improving the integration ecosystem can raise the quality of the bottom tier of the integrations so that they can work better out of the box."
"It could be easier to implement."
"The cost of Splunk SOAR has room for improvement."
"It would be ideal if we could automate processes even more."
"Portability is one thing that is currently lacking. The open-source product that I evaluated had portability. It would require a lot of development effort, but it will save the cost of rewriting all the playbooks."
"The UI can be more customizable for the clients."
"The pricing could be a bit more reasonable. It would be great if it were feasible for smaller organizations."
"Suppose I am initially granted user rights or analyst rights, but later on, I also get admin rights. SOAR is unable to amend the limitations of my role. I raised a support ticket with Splunk about this. They said it's a bug in their 5.3.5 version. To fix this, I had to reinstall the entire platform from scratch.."
 

Pricing and Cost Advice

Information not available
"It's very overpriced because it is based on the number of users. There is no bulk licensing."
"The licensing cost is reasonable."
"When we first purchased our Splunk SOAR license, it was based on an event-count model. It was based on the number of events. I had strong opinions at the time that automation should not be stifled by the amount of automation you can accomplish, so the previous structure was not as beneficial for us. Later that year, we got told or saw at a conference that they announced user-based pricing. We are now in a renewal period, so we migrated to a user-based license model, which is more appropriate for us so that we no longer have to worry about stifling our automation based on the quantity."
"Splunk SOAR is more expensive compared to other options for SOAR."
"Splunk SOAR is an expensive solution for an organization of our size."
"While I can't confirm the exact pricing, some colleagues have mentioned that Splunk SOAR may be on the costlier side."
"I don't know the exact price, but for my region, it is very expensive."
"Splunk is a fast enterprise tool, but it costs too much. At the same time, it's worth what we pay, in my opinion. We can efficiently perform all the functions and tie together the data. It's the perfect tool for our needs."
report
Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.
865,295 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
8%
Manufacturing Company
7%
Retailer
7%
Computer Software Company
7%
Computer Software Company
13%
Financial Services Firm
12%
Manufacturing Company
11%
University
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Rapid7 InsightConnect?
Compared to other SOAR solutions, the pricing is reasonable as Rapid7 provides it as a bundle called InsightIDR Ultimate, with unlimited workflows.
What needs improvement with Rapid7 InsightConnect?
The GUI needs improvement, as creating workflows can be cumbersome. More updated plugins are needed to leverage existing functionalities, such as APIs for functions like blocking malicious IPs in F...
What is your primary use case for Rapid7 InsightConnect?
We are using Rapid7 InsightConnect in a partner model, operating as a service provider. We buy licenses under World Data Direct and distribute them internally, acting as an MSSP.
What do you like most about Splunk Phantom?
Splunk SOAR's quick response to incidents is the most valuable part.
What is your experience regarding pricing and costs for Splunk Phantom?
Splunk SOAR is moderately priced, neither cheap nor overly expensive.
What needs improvement with Splunk Phantom?
There are areas in Splunk SOAR that have room for improvement. To make Splunk SOAR a better solution, there could be better built-in debugging tools, smarter playbook suggestions, and enhanced life...
 

Also Known As

Rapid7 Insight Connect, Komand
Phantom
 

Overview

 

Sample Customers

Starr Companies, Landmark Health
Recorded Future, Blackstone
Find out what your peers are saying about Rapid7 InsightConnect vs. Splunk SOAR and other solutions. Updated: July 2025.
865,295 professionals have used our research since 2012.