Rapid7 InsightIDR

Rapid7 InsightIDR is a cloud SIEM and extended detection and response tool, meaning a central place to collect security logs and spot attacks; Rapid7 sells it as part of a family it now calls Incident Command. Security teams use it to collect logs from endpoints, cloud accounts, and network gear, then hunt for and investigate threats from one screen. Its AI features score and group alerts so analysts see likely real threats first instead of a raw alert feed. It includes deception technology, meaning fake systems that lure and expose attackers early, and response actions like isolating a device or disabling an account run straight from the console. Rapid7 reports more than 11,000 companies use its platform and holds a spot in Gartner's Magic Quadrant for SIEM.

This fits a company that wants a cloud SIEM without running its own log storage systems, and a team that needs log search and endpoint detection together without buying two separate tools. A good starting point is the Essential tier, priced per monitored asset, moving up to Advanced or Ultimate as your needs grow. Planning pricing runs roughly 6 to 30 dollars per asset per month depending on tier and volume; treat that range as an estimate and confirm current numbers with Rapid7. Two risks: cost rises with asset count, so a fast-growing company should ask how pricing scales before signing a multi-year deal, and teams switching from an older SIEM need extra time to rebuild detection rules and reports in the new format.