Rapid7 Reviews, Ratings & Features 2026 | Gartner Peer Insights

Security orchestration, automation and response (SOAR) solutions combine incident response, orchestration and automation, and threat intelligence (TI) management capabilities in a single platform. SOAR tools are also used to document and implement processes (aka playbooks, workflows and processes); support security incident management; and apply machine-based assistance to human security analysts and operators.
SOAR solutions must provide:
- Highly customizable workflow process management that enables repeatable automated tasks to be turned into playbooks that run in isolation or joined together into more sophisticated workflows.
- The ability to store (locally or in a third-party system) incident management data to support SecOps investigations.
- Manually instigated and automated triggers that augment human security analyst operators to carry out operational tasks consistently.
- A mechanism to collate and better operationalize the use of threat intelligence.
- Support for a broad range of existing security technologies that supports improved analyst efficiency and acts as an abstraction layer between the desired outcomes and the custom-made set of solutions in place in your environment.

Active

Find the top Security Orchestration, Automation and Response Solutions with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Security Orchestration, Automation and Response Solutions (Transitioning to Security Information and Event Management)

Security Orchestration, Automation and Response Solutions

InsightConnect

Rapid7

Cyber Security Analyst

InsightConnect is a really useful product that we use all the time. The focus for us being a small security team is to implement as much automated workflows as possible with Rapid7 InsightIDR so if during the night something happens we can guarantee that InsightConnect has run the workflow to stop an incident from progressing further when we are not on hand to deal with it. It's been a learning curve to get to grips with how it works and we've been using it for the best part of 4-5 years now, but with lots of work and testing, we have some really great and powerful automated workflows that aid us in stopping attacks fast and also some workflows written to help the IT support team with automated user management within Office 365 and Active Directory. We wouldn't be without it. 

1B - 3B USD

<50M USD

500M - 1B USD

3B - 10B USD

50M - 250M USD

250M - 500M USD

10B - 30B USD

DIRECTOR, IT SECURITY AND RISK MANAGEMEN

Insight Connect is the orchestrator for Insight Detection and Response (IDR). Performance is dependent upon which IDR tier is part of the subscription, there are three tiers. If you are using popular products, it probably has a plug-in. Lesser known products may not integrate easily.

CYBER SECURITY INCIDENT LEAD

Automate with clarity and intelligence with trust services. 

Palo Alto Networks

Cisco Systems (Splunk)

Google (Siemplify)

Swimlane

ServiceNow

Other...

Microsoft

Fortinet

Dataminr (ThreatConnect)

Sumo Logic

DFLabs

Torq

Rapid7, Inc. aims to create a safer digital world by simplifying and making cybersecurity simpler and more accessible. Rapid7 empowers security professionals worldwide to manage a modern attack surface through its technology, research, and broad, strategic expertise. Rapid7’s comprehensive security solutions help over 11,000 customers unite cloud risk management with threat detection and response to reduce attack surfaces and eliminate threats quickly and precisely.

Organizations around the globe rely on Rapid7 technology, services, and research to securely advance. The visibility, analytics, and automation delivered through our Insight cloud simplifies the complex and helps security teams reduce vulnerabilities, monitor for malicious behavior, investigate and shut down attacks, and automate routine tasks. 

Rapid7 is a global enterprise focused on advancing security technology and services. Leveraging the power of the Insight cloud platform, Rapid7 provides visibility, analytics, and automation solutions to security teams worldwide. This aids in reducing vulnerabilities, monitoring malicious behavior, investigating and neutralizing cyber attacks, and automating routine tasks. The focus is on simplifying complex security processes, thereby mitigating risks for businesses in the digital landscape.

Reviews

Ratings Overview

Overall experience with

Favorable Review

Scalability and Integration Strengths insight connect as best SOAR solution

Critical Review

Difficulty in Building Workflows with Insight Connect and Automation

Likes and dislikes about

likes

dislikes