Try our new research platform with insights from 80,000+ expert users

Rapid7 InsightIDR vs Trend Vision One comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 28, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Rapid7 InsightIDR
Ranking in Endpoint Detection and Response (EDR)
22nd
Ranking in Extended Detection and Response (XDR)
18th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
32
Ranking in other categories
Security Information and Event Management (SIEM) (15th), User Entity Behavior Analytics (UEBA) (7th), Threat Deception Platforms (4th)
Trend Vision One
Ranking in Endpoint Detection and Response (EDR)
4th
Ranking in Extended Detection and Response (XDR)
2nd
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
96
Ranking in other categories
Network Detection and Response (NDR) (3rd), Attack Surface Management (ASM) (3rd), AI-Powered Cybersecurity Platforms (3rd), AI Security (1st)
 

Mindshare comparison

As of January 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Rapid7 InsightIDR is 1.2%, up from 0.9% compared to the previous year. The mindshare of Trend Vision One is 2.1%, down from 2.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Market Share Distribution
ProductMarket Share (%)
Trend Vision One2.1%
Rapid7 InsightIDR1.2%
Other96.7%
Endpoint Detection and Response (EDR)
 

Featured Reviews

SohailHyder - PeerSpot reviewer
Head of Cyber Security at Super Secure
Has supported compliance needs for mid-sized organizations but lacks customization and advanced integration
If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is. This is where it can improve if we keep in front the feature sets of a complete SIEM solution. Most common in the market is QRadar, but it is depleting now. It has been taken over by some other products such as Splunk and LogRhythm. If we compare these things with Rapid7 InsightIDR, then there are definitely some gaps that need to be filled. Data retention is also one concern because Rapid7 InsightIDR is cloud-based and operates on a subscription model. Whatever data you want to retain, it has to be paid for separately or it has a cost. Other solutions that are on-premises can have their own infrastructure or they provide some data retention for a month or in some capacity-wise, they provide that solution to them which makes them more attractive.
SemihDalkıran - PeerSpot reviewer
Cyber Security Senior Technical Consultant at a consultancy with 11-50 employees
Built faster threat response and improved visibility with real-time monitoring and flexible deployment
Trend Vision One allows us to monitor attacks in real time, which is a significant benefit. We can quickly see where the attack is coming from. Trend Vision One enables us to use different products with a flexible license. For example, if a customer is using endpoint security and wants to switch to another solution, they can instantly use a different Trend Micro product, such as email. Trend Vision One has helped to reduce the time to detect and respond to different threats, as it can respond to attacks very quickly. With playbook templates, in cases of recurring attacks, responses can be made quickly using predefined playbooks. Trend Vision One has helped to reduce noise from false positives. There have been false positives before, but it was due to the customer not telling us which app they were using. Best practice configurations must be applied properly to avoid such issues. Trend Vision One helps customers consolidate the use of security vendors and reduce silos by offering one platform for all product management.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution's initial setup is easy."
"I like that it's a cloud-based solution."
"Log search allows us to dive deep into aggregated logs and query all event types at once.​"
"Another very important part of insightIDR is the ability to collect data from endpoint devices via agent software. With a large remote workforce, this allows visibility into the endpoints that are connected to the internet, but not to the corporate network."
"The alerting to drive investigations and remediation has been its most valuable feature.​"
"The solution is easy to use, and the interface is intuitive."
"I have seen that Rapid7 InsightIDR provides security to the networks and endpoints in the company."
"Scalability-wise, I rate the solution a ten out of ten. As a cloud tool, the product is highly scalable."
"I like how easy it is, and there is a single pane of glass. We have one console for everything."
"The best features in Trend Vision One are the workbench and the XDR feature for the playbooks; we continue to use these two features extensively."
"We are very impressed with the single pane of glass visibility that Trend Micro XDR provides."
"I like the workbench. It is a view of all the alerts or problems in your estate. The visibility that it provides to engineers is very useful. It is one thing having lots of alerts. It is another thing to have something to correlate all your alerts into a workbench for you so that you can see what is going on."
"Trend Vision One helped reduce the time to detect and respond to threats by 70% to 80%."
"Trend Micro XDR is stable, scalable, and reasonably priced."
"We've found the pricing to be reasonable."
"Centralized visibility is valuable. We can view what kind of virus or threat exists, where it has traveled, and how it started. A security analyst can use just this one console to view all the information."
 

Cons

"The dashboard is an area that could be simplified."
"Tenable Nessus is easier to deal with. It's more efficient and accurate. InsightIDR is heavier than Tenable in terms of performance and scanning. Rapid7 would be much easier to use if it had a network connector like Tenable. Tenable's connector allows continuous monitoring over the B caps."
"One of the things that could be better is digital forensics. It is there, but it can be better. They could provide more on the endpoint detection level."
"If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is."
"I feel it would greatly benefit from more supported log sources."
"Cloud risk assessment is one area where I think they need a lot of improvement."
"I would like to see more development in InsightIDR towards building their SIEM solution and converting it to XDR."
"Customised alert recipients need to be added to allow better first-line action and quicker response. Configurable honeypots would be a welcome addition."
"The information captured by Trend Vision One needs to be more detailed."
"In new versions I would like to see better implementation of the reporting features, especially in regards to EDR visibility."
"Vision One could improve its area networking and email security."
"We'd like to see more use of AI around analytics and controls."
"It would be better if it were more user-friendly. It would also be better if the implementation were more straightforward."
"The support documentation could be more comprehensive."
"They need to modify their licensing mechanism and improve their AI-based detections."
"Integration with other tools and deploying in hybrid environments need improvement."
 

Pricing and Cost Advice

"Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."
"​I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability.​"
"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."
"​Accurately predict your licensing counts as this is a subscription based product.​"
"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."
"The solution has a mid-range price point in the market"
"The pricing is good, and it is not very expensive."
"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."
"Trend Micro solutions are very expensive compared to other solutions. Even though everything is in one console, each feature requires a separate license."
"The pricing of the solution is okay. There is a need for me to look into the new pricing plan introduced by the solution recently."
"When I compare it to its peers that can do the same, it is cost-effective."
"Trend Micro XDR has a good price, and on a scale of one to five, I would rate it a four out of five in terms of price."
"Trend Micro's cost is higher than other solutions. That is the main reason why we need to switch to another solution."
"Trend Micro XDR is expensive but we got a good deal from Trend Micro."
"The price for Trend Vision One is reasonable compared to Microsoft and Symantec."
"Its price is very decent. It suits our requirements."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Financial Services Firm
9%
Manufacturing Company
8%
Government
7%
Computer Software Company
11%
Manufacturing Company
10%
Comms Service Provider
9%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise5
Large Enterprise6
By reviewers
Company SizeCount
Small Business52
Midsize Enterprise12
Large Enterprise39
 

Questions from the Community

What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What do you like most about Rapid7 InsightIDR?
During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, its origin, and potential threats. For instance, it can identify if an applicati...
What do you like most about Trend Micro XDR?
I appreciate the value of real-time activity monitoring.
What is your experience regarding pricing and costs for Trend Micro XDR?
Trend Vision One is not so expensive; it is very moderate.
What needs improvement with Trend Micro XDR?
Trend Vision One could bring in more data loss prevention capabilities specifically on the endpoints, as the current offering lacks some important capabilities.They could also bring in data loss pr...
 

Also Known As

InsightIDR
Trend Micro XDR, Trend Micro XDR for Users, Trend Vision One - XDR for Networks, Trend Micro Trend Vision One
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Liberty Wines, Pioneer Telephone, Visier
Panasonic North America, Decathlon, Fischer Homes, Banijay Benelux, Unigel, DHR Health,
Find out what your peers are saying about Rapid7 InsightIDR vs. Trend Vision One and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.