No more typing reviews! Try our Samantha, our new voice AI agent.

Rapid7 InsightIDR vs Varonis Platform comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 15, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Rapid7 InsightIDR
Ranking in User Entity Behavior Analytics (UEBA)
11th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
33
Ranking in other categories
Security Information and Event Management (SIEM) (22nd), Endpoint Detection and Response (EDR) (32nd), Threat Deception Platforms (6th), Extended Detection and Response (XDR) (20th)
Varonis Platform
Ranking in User Entity Behavior Analytics (UEBA)
6th
Average Rating
8.4
Reviews Sentiment
6.3
Number of Reviews
20
Ranking in other categories
Email Security (17th), Data Loss Prevention (DLP) (8th), Data Governance (5th), SaaS Security Posture Management (SSPM) (1st), Data Security Posture Management (DSPM) (2nd), Compliance Management (8th), Ransomware Protection (7th), Identity Threat Detection and Response (ITDR) (5th), Insider Risk Management (1st), AI Security (9th)
 

Mindshare comparison

As of November 2026, in the User Entity Behavior Analytics (UEBA) category, the mindshare of Rapid7 InsightIDR is 4.6%, down from 7.4% compared to the previous year. The mindshare of Varonis Platform is 4.3%, down from 5.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Entity Behavior Analytics (UEBA) Mindshare Distribution
ProductMindshare (%)
Varonis Platform4.3%
Rapid7 InsightIDR4.6%
Other91.1%
User Entity Behavior Analytics (UEBA)
 

Featured Reviews

Prajwal Chougale - PeerSpot reviewer
SOC L2 Analyst at a tech services company with 51-200 employees
Centralized threat hunting has improved alert accuracy and simplifies incident investigations
I would say there are two areas for improvement: the reporting dashboard that provides insights or reports weekly or monthly lacks detailed information about how logs are being ingested. While the details are there, they could be more concise and easier to understand for any level of authority. The second area is alert tuning; compared to Microsoft Sentinel, Rapid7 InsightIDR provides fewer alerts with more static alert functionality and lacks dynamic alerting exposures. There could be improvements to learn from past alert activities for more dynamic alert configurations. These two areas are the main areas for improvement; everything else is good.
TarunKumar11 - PeerSpot reviewer
Global Leadership Council at a tech company with 10,001+ employees
Data governance has strengthened and automation now reduces risk and manual compliance work
Varonis Platform offers key features including data discovery, data classification, data analysis, governance, user and entity behavior analysis, also known as UEBA, which helps in ransomware detection, insider threat detection, and compliance reporting. It does a lot of automation from a remediation standpoint, as well as investigation and forensics. The number one feature that makes the biggest difference for my clients is visibility into unstructured data; that is the most difficult for organizations to achieve. They do not have a good understanding of where sensitive data resides, who has access to this data, whether this access is appropriate, and how data is being used. Varonis Platform provides visibility, governance, threat detection, and automated remediation around data. Varonis Platform is a great data discovery platform that provides visibility into sensitive data estimates and how it is being used. Clients have been able to reduce excessive permissions, strengthen their compliance posture, detect insider threats, and ransomware activity, which would otherwise be difficult and manual. Varonis Platform is deployed in my clients' organizations in a combination of all types. Many clients use Varonis Platform in a largely SaaS-based model since it is a data security platform consumed in this way, and many organizations still operate hybrid environments. As far as Varonis Platform is in a position to get the data source and identify systems, it can discover and classify more secure data. Deployment in most of our clients is cloud-based, connecting to Microsoft 365, AWS, or other SaaS applications such as Salesforce. In other environments, it is a hybrid deployment with SaaS and on-premises, including file servers, NAS devices, and AD servers.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Integration with threat modeling from the Metasploit and InsightIDR repositories."
"The incident case management is the most valuable feature. Even though there's always something I find I would like to add to that feature, the ability to quickly sort through all the logs, network and endpoint data, etc., and add it to an incident case as part of the investigation, is nice. Having it automatically timeline that additional data into the original incident timeline, and correlate it to other notable events and activities on the network, results in a huge improvement in our overall confidence that we've quickly traced down the right source of an issue."
"The most valuable features have to do with ease-of-use, as it is easy to check the events, investigate suspicious activities, and do forensic analysis, and the web interface is great — very useful and user-friendly."
"I definitely recommend Rapid7 InsightIDR."
"It improved my organization by building a security alerting program."
"I rate Rapid7 nine out of 10 for affordability"
"Rapid7 InsightIDR is budget-friendly and has a good market position because not everybody can afford to go for LogRhythm or Splunk or QRadar."
"The ability to ingest Office 365 log files, then process them into events and display them on a map."
"Varonis Platform's visibility feature helped us improve our data governance as we created a process that involved data classification and discovery over sensitive content."
"In my experience, the best features that Varonis Platform offers are data labeling, data classification, along with all the integrations and its easy-to-use platform."
"That alerting and reporting service is great."
"This solution informs us about who's moving data, whether accidentally or on purpose."
"I also appreciate the reporting feature, which allows for the extraction of various reports based on specific needs. These reports can be used for audit purposes, such as tracking changes in file locations or deletions."
"The telemetry to capture everything and the reports are very easy to configure without having a developer degree."
"The 24/7 support is the most valuable feature, and they have been able to answer support questions pretty quickly."
"The most important feature is remediation. In remediation support, there is no group permission. We'll go ahead and remediate the access from the Dell folder to the parent folder."
 

Cons

"Rapid7 doesn't integrate well with all our security tools from various vendors, so we plan to switch. Many of our solutions work with Rapid7, but some do not. We are already searching for a replacement already."
"The dashboard is an area that could be simplified. For management, it should be clear and the files should be there."
"Cloud risk assessment is one area where I think they need a lot of improvement."
"One thing that springs to mind is easier API integration with ITSMs. We are evaluating a new ITSM and I would like to have InsightIDR create a ticket when an attack is identified, and the ticket would be closed in InsightIDR when the ITSM resolution is completed. This would take out the "single point of failure" we currently have, if the email recipient is somehow absent, in recording the risk appetite for the incident and the actions taken to mitigate or not."
"The main problem lies in the processes within the client's operating systems."
"Rapid7 InsightIDR is not intuitive to search for logs. It should be more user-friendly and improve the dashboards. We should be able to use ready-made templates instead of having to build one."
"Tenable Nessus is easier to deal with. It's more efficient and accurate. InsightIDR is heavier than Tenable in terms of performance and scanning. Rapid7 would be much easier to use if it had a network connector like Tenable. Tenable's connector allows continuous monitoring over the B caps."
"It would be useful to import threat intelligence in YARA format along with known incorrect email addresses.​"
"For unstructured data monitoring, it's one of the top ones, if not the top one, due to its usability."
"Varonis Platform could be improved because when I used it, we had a significant issue related to the large volume of data on that file share."
"The potential areas of improvement I see for Varonis Platform are that it doesn't have a SIEM or SOAR console where you can see your incidents or a native style incident case management where you can see all your incidents and do the tracking of all those things."
"The solution's areas of improvement are the interface and the dependency on on-premises deployment for some components."
"There is one thing that if I add something manually, I get so many alerts. That's the biggest bad thing."
"The remediation process can be improved. There will be no existing permission group for the McAfee channel domains. We can create a new permissions group for the required folder."
"I'd like to see automatic updates for this solution. Currently, it's a manual process to update all the keywords."
"For user-based reports, log on activity, and stuff like that, it doesn't seem to really be present like Log360."
 

Pricing and Cost Advice

"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."
"The pricing of the solution depends on the user. But there is a yearly licensing cost."
"The solution has a mid-range price point in the market"
"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help.​"
"It is a reasonably priced solution."
"​I am sure that there are cheaper products out there, but none that meet so many of our needs whilst maintaining stability and usability.​"
"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."
"Licensing is straightforward. If, for some reason, you don’t meet the minimum licensing requirements, there is a third-party managed service that can help."
"You could do a subscription, where you pay yearly, or you could purchase it outright. The licensing cost is based on the number of users on the system that you are monitoring."
"The platform is expensive. I rate the pricing a nine out of ten."
"The pricing is good. It neither expensive nor cheap. It is average."
"Varonis Platform wasn't certainly the cheapest solution."
"I would rate the pricing an eight out of ten, with ten being the most expensive."
"Licensing is on an annual basis. Maintenance and renewal fees are separate. Varonis Datalert is quite expensive."
"It's expensive, kind of, really expensive."
report
Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
10%
Financial Services Firm
9%
Comms Service Provider
8%
Outsourcing Company
6%
Financial Services Firm
14%
Manufacturing Company
11%
Healthcare Company
7%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise5
Large Enterprise6
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise15
 

Questions from the Community

What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is your experience regarding pricing and costs for Rapid7 InsightIDR?
My experience with pricing, setup costs, and licensing has been very positive; it is cost-effective and offers great value for the money. We bought the licensing through an agent, and the setup was...
What needs improvement with Rapid7 InsightIDR?
I would say there are two areas for improvement: the reporting dashboard that provides insights or reports weekly or monthly lacks detailed information about how logs are being ingested. While the ...
What needs improvement with Varonis Platform?
Varonis Platform could be improved because when I used it, we had a significant issue related to the large volume of data on that file share. Although Varonis Platform helped us gain more visibilit...
What is your primary use case for Varonis Platform?
My main use case for Varonis Platform is to monitor access to sensitive data across file shares, Microsoft 365, and SharePoint. The main objective is to identify overexposed data, reduce access ris...
What advice do you have for others considering Varonis Platform?
Varonis Platform receives a rating of seven out of ten. I chose seven out of ten because the user experience was easy, we could apply it and gain more visibility, but the performance of the solutio...
 

Also Known As

InsightIDR
SlashNext Complete
 

Overview

 

Sample Customers

Liberty Wines, Pioneer Telephone, Visier
Nottingham Building Society
Find out what your peers are saying about Rapid7 InsightIDR vs. Varonis Platform and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.