# Rapid7 InsightIDR review (2026): is it worth it? > Rapid7 SIEM and threat detection, now sold as Incident Command Checked Nov 13, 2026 ยท graded Nov 13, 2026 by ToolGPA. InsightIDR was Rapid7's detection and response product. The product page at the roster address now presents an AI-powered Next-Gen SIEM called Incident Command in Essentials, Advanced and Ultimate packages. It combines log and telemetry collection, alert triage, endpoint detection and response, and automated response playbooks. - **Category:** Antivirus & Malware Protection - **Made by:** Rapid7 - **Website:** https://www.rapid7.com/products/siem/ - **Runs on:** Web - **Who should skip it:** Not for you if you want a virus scanner, since it is a SIEM. - **Facts last checked:** Nov 13, 2026 ## Pricing Rapid7 InsightIDR's current pricing could not be confirmed from its own site. ## Key features - **Next-gen SIEM:** Combines logs, telemetry and asset context from cloud, SaaS, endpoints and hybrid environments in one view. - **AI alert triage:** AI-driven behavioral detections and triage, with natural-language search across large volumes of records. - **Endpoint detection and response:** The Ultimate package adds XDR capabilities and embedded digital forensics in one agent, per the vendor. - **Deception technology:** The Advanced package adds deception technology and deeper threat intelligence. - **Response automation:** SOAR playbooks and actions such as isolating machines, revoking credentials and killing processes. ## Good for - Security operations teams replacing a legacy SIEM - Organizations that want detection tied to exposure data ## Worth knowing - The page read does not use the name InsightIDR; the product appears there as Incident Command Next-Gen SIEM. - No SIEM package prices are published; the page offers a demo and a Compare Packages view. - Rapid7 publishes starting prices only for other products, such as InsightVM at $1.62 per asset per month. - It is a SIEM and detection platform rather than a consumer antivirus. ## ToolGPA grades **GPA: 1.4 out of 4**, graded Nov 13, 2026. Rapid7's SIEM, listed here as InsightIDR and now shown as Incident Command, is a detection platform for security teams. No SIEM prices are published, and it is not a consumer antivirus. The page read does not use the InsightIDR name. - **Value for money: C.** No price is published, so there is nothing to set against this category's $2.58 to $6.50 a month; the listing says it is by quote. Rapid7 publishes starting prices only for other products. - **Free plan and trial: F.** Nothing free on record: no free plan and no trial, and a demo request is not a trial. The page offers a demo. - **Features: D.** A SIEM and detection platform, not endpoint protection, so it needs endpoint products alongside it. - **Ease of use: C.** Business product with a console and agents to roll out; no store rating is on record and the listing shows setup work, so it sits at the ordinary grade. - **Platforms and integrations: C.** Only a web console is on record. Operating systems, phone apps and integrations are not listed. These are ToolGPA's own grades. Graded from this listing, whose facts were read from Rapid7's own pages on 13 November 2026. Not based on using the product, and shorter than our full reviews. ## Where it stands among antivirus apps - Rapid7 InsightIDR's GPA of 1.4 is higher than 0 of the 56 other antivirus apps we grade, and level with 2. - It stands best on platforms and integrations (C, above 10 of 56) and worst on free plan and trial (F, above 0). The category's chart of price against score: https://toolgpa.com/charts/antivirus ## Keep it, or make your own? **Keep it.** To replace Rapid7 InsightIDR you would be making an engine that recognises new malware as it appears. That is not a weekend's work, with an AI app builder or without one. That makes this kind of software worth paying for, not this one in particular: 54 of the 56 other antivirus apps grade higher. - You could make: Reports: an app builder makes this well. - You could not: An engine that recognises new malware as it appears. - You could not: AI features, unless you pay a model provider for each request yourself. A judgement by ToolGPA from this listing, by rules that are the same for every tool. Nothing was built to test it. **Tags:** Malware protection, AI features, Reports ## Alternatives - [CrowdStrike Falcon Go](https://toolgpa.com/tools/crowdstrike-falcon-go): Small-business antivirus with USB device control and mobile protection. [Compare](https://toolgpa.com/compare/crowdstrike-falcon-go-vs-rapid7-insightidr) - [Palo Alto Cortex XDR](https://toolgpa.com/tools/palo-alto-cortex-xdr): Endpoint prevention and XDR from Palo Alto Networks, by quote. [Compare](https://toolgpa.com/compare/palo-alto-cortex-xdr-vs-rapid7-insightidr) - [Elastic Security](https://toolgpa.com/tools/elastic-security): SIEM with built-in endpoint protection, billed by data volume. [Compare](https://toolgpa.com/compare/elastic-security-vs-rapid7-insightidr) ## Sources The prices, plans, platforms and features above were read from these pages on Nov 13, 2026: - https://www.rapid7.com/products/siem/ - https://www.rapid7.com/pricing/ Page: https://toolgpa.com/tools/rapid7-insightidr Listed by ToolGPA (toolgpa.com).