Rapid7 InsightIDR vs Trend Micro Deep Discovery comparison

The compared Rapid7 and TrendAI solutions aren't in the same category. Rapid7 is ranked #14 in SIEM , with an average rating of 7.8, and holds a 2.1% mindshare in the category. TrendAI is ranked #6 in ID , with an average rating of 8.6, and holds a 3.4% mindshare. Additionally, 96% of Rapid7 users are willing to recommend the solution, compared to 100% of TrendAI users who would recommend it.

Rapid7 InsightIDR

Read 32 Rapid7 InsightIDR reviews

6,954 Views
3,407 Comparison Views

96% willing to recommend

Trend Micro Deep Discovery

Read 28 Trend Micro Deep Discovery reviews

3,538 Views
1,946 Comparison Views

100% willing to recommend

Rapid7 InsightIDR

Trend Micro Deep Discovery

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Rapid7 InsightIDR and Trend Micro Deep Discovery based on real PeerSpot user reviews.

Find out what your peers are saying about Splunk, Wazuh, IBM and others in Security Information and Event Management (SIEM).

To learn more, read our detailed Security Information and Event Management (SIEM) Report (Updated: February 2026).

Buyer's Guide

Security Information and Event Management (SIEM)

February 2026

Download the complete report

Helped 881,733 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Rapid7 InsightIDR

Average Rating

8.4

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (14th), User Entity Behavior Analytics (UEBA) (8th), Endpoint Detection and Response (EDR) (23rd), Threat Deception Platforms (4th), Extended Detection and Response (XDR) (18th)

Trend Micro Deep Discovery

Average Rating

8.4

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Intrusion Detection and Prevention Software (IDPS) (6th), Advanced Threat Protection (ATP) (17th), Network Detection and Response (NDR) (6th)

Mindshare comparison

While both are Network Security Systems solutions, they serve different purposes. Rapid7 InsightIDR is designed for Security Information and Event Management (SIEM) and holds a mindshare of 2.1%, down 2.6% compared to last year.
Trend Micro Deep Discovery, on the other hand, focuses on Intrusion Detection and Prevention Software (IDPS), holds 3.4% mindshare, down 4.6% since last year.

Security Information and Event Management (SIEM) Market Share Distribution
Product	Market Share (%)
Rapid7 InsightIDR	2.1%
Splunk Enterprise Security	7.1%
Wazuh	6.4%
Other	84.4%

Security Information and Event Management (SIEM)

Intrusion Detection and Prevention Software (IDPS) Market Share Distribution
Product	Market Share (%)
Trend Micro Deep Discovery	3.4%
Fortinet FortiGate	13.2%
Darktrace	11.5%
Other	71.9%

Intrusion Detection and Prevention Software (IDPS)

Featured Reviews

SohailHyder

Head Of Cyber Security at Super Secure

Has supported compliance needs for mid-sized organizations but lacks customization and advanced integration

If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is. This is where it can improve if we keep in front the feature sets of a complete SIEM solution. Most common in the market is QRadar, but it is depleting now. It has been taken over by some other products such as Splunk and LogRhythm. If we compare these things with Rapid7 InsightIDR, then there are definitely some gaps that need to be filled. Data retention is also one concern because Rapid7 InsightIDR is cloud-based and operates on a subscription model. Whatever data you want to retain, it has to be paid for separately or it has a cost. Other solutions that are on-premises can have their own infrastructure or they provide some data retention for a month or in some capacity-wise, they provide that solution to them which makes them more attractive.

Read full review

reviewer2266119

Senior IT Security Engineer at a financial services firm with 5,001-10,000 employees

Has improved email security through advanced filtration and timely threat detection

I work with Trend Micro Apex One. I have used the Deep Discovery's Sandbox analysis feature, and we utilize another appliance known as Deep Discovery Analyzer, abbreviated as DDA. This tool makes analysis for URLs and attachments contained in inbound emails, so whenever we receive an email with a URL or attachment, it will be analyzed by Trend Micro Deep Discovery Analyzer. In evaluating Deep Discovery's real-time visibility on network traffic, it is important to note that we applied our Deep Discovery Analyzer for Trend Micro to conduct sandboxing specifically for email channels only, and we do not utilize it for network channels. For network channel sandboxing, we use a solution called FortiAnalyzer, which belongs to another team called network security. I assess Deep Discovery's effectiveness in identifying sophisticated attack patterns by looking at how it handles high traffic loads, and how effectively it can use its instances and images to analyze numerous URLs and attachments simultaneously. Additionally, I evaluate its ability to maintain round-robin or load balancing across different analyses without leaving samples queued for analysis. The performance is critical when the product updates for signatures are up-to-date, as this aids in the detection and classification of URLs and attachments without delay in the analysis process. On a scale of one to ten, I rate Trend Micro Deep Discovery a nine.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Integration with threat modeling from the Metasploit and InsightIDR repositories."

"InsightIDR’s ability to process millions of transactions per day, and to notify me of the most critical ones, is priceless. InsightIDR has the alerts tuned, and has the ability to quickly drill down to determine the threat level."

"The solution provides satisfying native integration features"

"Enables the use of honey pots, honey users, and honey files to monitor for suspicious patterns."

"If you were on other solutions, you would notice that they use agents from third-party, from open-source, from a native OS, or from other tools. Here, however, it is an agent from Rapid7 itself. This adds to the solution's overall capabilities."

"Log search allows us to dive deep into aggregated logs and query all event types at once."

"The UI is very good."

"I definitely recommend Rapid7 InsightIDR."

More Rapid7 InsightIDR pros

"Sandboxing gives us a chance to identify malicious behavior, especially for unknown vulnerabilities, although it's rarely needed as a last resort after all other security measures have failed."

"The HTML file sandboxing is very good."

"The most valuable features are the protection and that it is fast."

"It is a very good solution. It is very light, and it is quite quick to figure out the problem in your network."

"The product's initial setup phase was not difficult."

"The solution has extension-based features that help it to analyze the environment. The environment can have different platforms like Windows, Linux, and Mac. The tool will give a report which can confirm the analysis of the issues. You can also get clear information on threats or suspicious files."

"As a security product, managing threats is crucial for my clients."

"Generally speaking, it just gives us a broad understanding of exactly what kind of threats occur. The submission point, analyzing point, and virtualization are within the environment that it supports. It helped us to improve our security levels and protect our internal network from any threats outside."

More Trend Micro Deep Discovery pros

Cons

"I feel it would greatly benefit from more supported log sources."

"InsightIDR's integration with other solutions could be improved. Also, I'd like more control from the portal over what's happening on the endpoint side. For example, when I see an attack on an endpoint, I want to be able to stop it from the portal."

"Sometimes, it is hard to get the right queries to use. Currently, the tool lacks a pre-made set of queries."

"One thing that springs to mind is easier API integration with ITSMs. We are evaluating a new ITSM and I would like to have InsightIDR create a ticket when an attack is identified, and the ticket would be closed in InsightIDR when the ITSM resolution is completed. This would take out the "single point of failure" we currently have, if the email recipient is somehow absent, in recording the risk appetite for the incident and the actions taken to mitigate or not."

"One of the things that could be better is digital forensics. It is there, but it can be better. They could provide more on the endpoint detection level."

"I would like to see more development in InsightIDR towards building their SIEM solution and converting it to XDR."

"Customised alert recipients need to be added to allow better first-line action and quicker response. Configurable honeypots would be a welcome addition."

"Rapid7 doesn't integrate well with all our security tools from various vendors, so we plan to switch. Many of our solutions work with Rapid7, but some do not. We are already searching for a replacement already."

More Rapid7 InsightIDR cons

"The solution could be more secure."

"The tool's configuration can be made easier."

"Scalability becomes an issue when managing a higher number of customers."

"Deep Discovery is easy to manage, but there is still room for improvement on the administration and operations side. Competing products have a cleaner interface that makes it easier to manage their products. Trend Micro offers a lot of features in one product suite, but it can be unwieldy for the customer to manage all that with a single interface."

"The scalability is sometimes limited."

"The product's scalability feature needs to be improved, as it is an area in the product with certain shortcomings."

"The solution could be more stable and offer more security."

"Additionally, better scanning capabilities for third-party applications would ensure comprehensive security without the need for exclusions."

More Trend Micro Deep Discovery cons

Pricing and Cost Advice

"The pricing of the solution depends on the user. But there is a yearly licensing cost."

"Rapid7 InsightIDR is priced very well and is cost-effective."

"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."

"The pricing is good, and it is not very expensive."

"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."

"It is a reasonably priced solution."

"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."

"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help."

More Rapid7 InsightIDR pricing and cost advice

"The licensing cost is a bit pricey. We pay a yearly subscription."

"Compared to its competitors, Trend Micro Deep Discovery is a little expensive."

"Overall, Trend Micro Deep Discovery has proven to be a reliable solution that enhances our security posture while minimizing operational disruptions."

"The tool's licensing costs are yearly. There are no additional costs associated with the product."

"The tool’s licensing costs depend on the customers."

"Trend Micro Deep Discovery is quite expensive compared to other endpoint security products."

"Overall, the price is good."

"The pricing is okay for some, and sometimes, some people find it expensive."

More Trend Micro Deep Discovery pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

881,733 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Financial Services Firm

Manufacturing Company

Government

Computer Software Company

11%

Financial Services Firm

Healthcare Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	5
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	6
Large Enterprise	9

Questions from the Community

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

See all answers

What do you like most about Rapid7 InsightIDR?

During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...

See all answers

What is your experience regarding pricing and costs for Rapid7 InsightIDR?

The product pricing is very cheap.

See all answers

What do you like most about Trend Micro Deep Discovery?

The tool's most valuable feature is its collaboration with other products. Integrating with other security products was simple and easy.

See all answers

What is your experience regarding pricing and costs for Trend Micro Deep Discovery?

The solution is very expensive.

See all answers

What needs improvement with Trend Micro Deep Discovery?

Server Protect is not commonly used. When considering the Sandbox feature, it only inspects small files, and not all types of files are supported. The solution is very expensive. The solution is no...

See all answers

Comparisons

Rapid7 InsightVM vs Rapid7 InsightIDR

Compared 5% of the time

Microsoft Sentinel vs Rapid7 InsightIDR

Compared 5% of the time

Splunk Enterprise Security vs Rapid7 InsightIDR

Compared 5% of the time

CrowdStrike Falcon vs Rapid7 InsightIDR

Compared 4% of the time

Darktrace vs Rapid7 InsightIDR

Compared 3% of the time

More Rapid7 InsightIDR Competitors

Trend Micro TippingPoint Threat Protection System vs Trend Micro Deep Discovery

Compared 11% of the time

Darktrace vs Trend Micro Deep Discovery

Compared 9% of the time

Vectra AI vs Trend Micro Deep Discovery

Compared 9% of the time

Fortinet FortiSandbox vs Trend Micro Deep Discovery

Compared 7% of the time

Cisco Secure Network Analytics vs Trend Micro Deep Discovery

Compared 5% of the time

More Trend Micro Deep Discovery Competitors

Product Reports

Buyer's Guide

Rapid7 InsightIDR

January 2026

Download Rapid7 InsightIDR product report

Buyer's Guide

Trend Micro Deep Discovery

January 2026

Download Trend Micro Deep Discovery product report

Also Known As

InsightIDR

Trend Micro Deep Discovery Inspector, Trend Micro Deep Discovery Analyzer

Overview

Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

Rapid7

Trend Micro Deep Discovery provides an intuitive interface and extensive threat visibility. It enhances detection with sandboxing and custom virtual machine images. Integration with Trend Micro Office Scan and Vision One ensures robust defense and detailed threat analysis.

Trend Micro Deep Discovery is a comprehensive network security tool used for intrusion detection, malware analysis, and zero-day vulnerability sandboxing. It supports various platforms and can be integrated with email and server protection. It's particularly useful for compliance with regulatory requirements through signature-based behavior analysis and virtual patching. Users benefit from easy installation, management, and responsive technical support.

What are the key features of Trend Micro Deep Discovery?

End-to-End Threat Visibility: Provides comprehensive monitoring and analysis of network threats.
Built-in Sandboxing: Allows custom virtual machine images for advanced threat detection.
Threat Analysis: Delivers detailed insights into threat activities and sources.
Integration Capabilities: Seamlessly integrates with Trend Micro Office Scan and Vision One for enhanced protection.
Platform Support: Supports multiple operating systems and platforms for broad coverage.

What benefits should users look for in reviews?

Improved Security: Enhances network protection and threat response efficacy.
Easy Management: Simplifies installation and administration processes.
Regulatory Compliance: Assists with meeting industry regulations through behavior analysis and patching.
Technical Support: Offers responsive and effective assistance for quick issue resolution.
Scalability: Adapts to growing or changing business needs with minimal disruption.

Trend Micro Deep Discovery is implemented across sectors requiring stringent security measures, such as finance, healthcare, and government. It's favored for its ability to analyze diverse network traffic and provide exceptional protection against sophisticated threats while ensuring compliance with strict data regulations. Industry reviews highlight its role in safeguarding sensitive information through robust security frameworks and adaptable deployment options.

TrendAI

Sample Customers

Liberty Wines, Pioneer Telephone, Visier

Allied Telesis, Atma Jaya Catholic University of Indonesia, Babou, Blekinge County Council, Delacour, Hiroshima Prefectural Government, Live Nation Entertainment Inc., Mazda Motor Logistics Europe, McGill University Health Centre, Mikuni Corporation, OKWAVE, Sinar Mas Land, SWICA, UTOC Corporation

Buyer's Guide

Security Information and Event Management (SIEM)

February 2026

Download Free Report

Find out what your peers are saying about Splunk, Wazuh, IBM and others in Security Information and Event Management (SIEM). Updated: February 2026.

DOWNLOAD NOW

881,733 professionals have used our research since 2012.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.