Write a review temporarily disabled. Our system flagged this request as potentially automated and has disabled form submission for security reasons. If you believe this is a mistake, please contact us. We’ll be happy to help resolve the issue.

Rapid7

Rapid7 Incident Command

Composite Score

8.2 /10

CX Score

8.6 /10

24 Reviews Write a Review

Claim Software

What is Rapid7 Incident Command?

Incident Command (Previously Rapid7 InsightIDR) is the only AI-powered security operations platform that’s purpose-built to deliver unified insight and deep environmental context across your entire threat landscape, with powerful analytics, investigation, response, and remediation functionality. AI Powered Next-Gen SIEM. Move beyond legacy SIEM with unified visibility, instant total attack surface context, and AI that transforms signals into decisive action.

Company Details

Need Assistance?

We're here to help you with understanding our reports and the data inside to help you make decisions.

Get Assistance

Awards & Recognition

Rapid7 Incident Command won the following awards in the Endpoint Detection & Response category

Filter By

Strategy and Innovation
Contract Negotiation
Conflict Resolution

Latest Award, 2025

Strategy and Innovation
Product Impact
Contract Negotiation
Conflict Resolution

2024

5 Top Rated Capabilities

2 Top Rated Features

2024

Contract Negotiation
Conflict Resolution

2023

4 Top Rated Capabilities

1 Top Rated Features

2023

Rapid7 Incident Command Ratings

Real user data aggregated to summarize the product performance and customer experience.
Download the entire Product Scorecard to access more information on Rapid7 Incident Command.

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

90 Likeliness to Recommend

100 Plan to Renew

83 Satisfaction of Cost Relative to Value

{y}

{name}

Emotional Footprint Overview

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

+98 Net Emotional Footprint

The emotional sentiment held by end users of the software based on their experience with the vendor. Responses are captured on an eight-point scale.

How much do users love Rapid7 Incident Command?

0% Negative

0% Neutral

100% Positive

Pros

Helps Innovate
Continually Improving Product
Reliable
Performance Enhancing

Feature Ratings

Average 81

Agent Efficiency

Intrusion Detection Prevention

Continuous Monitoring

Task Prioritization

Automated Threat Response

Machine Learning

Behavioural Analytics

IOC Tools

IOC Consumption

Malware Identification Accuracy

Whitelisting Blacklisting

Vendor Capability Ratings

Average 85

Usability and Intuitiveness

Ease of Implementation

Breadth of Features

Quality of Features

Ease of IT Administration

Vendor Support

Ease of Data Integration

Business Value Created

Product Strategy and Rate of Improvement

Availability and Quality of Training

Ease of Customization

Rapid7 Incident Command Reviews

Role: Consultant
Industry: Technology
Involvement: IT Development, Integration, and Administration

Validated Review

Anonymous Reviewer

Submitted Jan 2023

A great product with an ease of use!

Likeliness to Recommend

10 /10

Pros

Helps Innovate
Continually Improving Product
Reliable
Performance Enhancing

Raven P.

Role: Information Technology
Industry: Consulting
Involvement: IT Leader or Manager

Validated Review

Verified Reviewer

Submitted Nov 2022

SIEM and XDR in one go

Likeliness to Recommend

10 /10

What differentiates Rapid7 Incident Command from other similar products?

Rapid7 combines a traditional SIEM with XDR endpoint and network detection response

What is your favorite aspect of this product?

XDR agents can see through all the endpoint processes and AD information

What do you dislike most about this product?

Our level 2 support needs to train more

What recommendations would you give to someone considering this product?

Study Regex expression as the SIEM part requires it

Pros

Helps Innovate
Continually Improving Product
Reliable
Performance Enhancing

Chris G.

Role: Information Technology
Industry: Manufacturing
Involvement: IT Development, Integration, and Administration

Validated Review

Verified Reviewer

Submitted Dec 2022

Great Product for monitoring environment for IOC's

Likeliness to Recommend

8 /10

What differentiates Rapid7 Incident Command from other similar products?

The agent is used for both IVM and IDR giving making this product very versatile. With MDR support we have excellent 24/7 monitoring.

What is your favorite aspect of this product?

Ingesting different data sources is easy with lots of useful documentation on integrating with logs from our AV solutions and cloud services. Correlating data from different log sources to investigate events.

What do you dislike most about this product?

Agents can sometimes be difficult to manage in large environments.

What recommendations would you give to someone considering this product?

Be sure to add as much data sources as possible.

Pros

Security Protects
Reliable
Performance Enhancing
Enables Productivity

Rapid7 Incident Command

What is Rapid7 Incident Command?

Company Details

Need Assistance?

Awards & Recognition

Rapid7 Incident Command Ratings

90 Likeliness to Recommend

100 Plan to Renew

83 Satisfaction of Cost Relative to Value

Emotional Footprint Overview

+98 Net Emotional Footprint

How much do users love Rapid7 Incident Command?

Pros

Feature Ratings Average rating of all product features, some of which may not be shown below

Agent Efficiency Agents are lightweight and create few conflicts or performance impacts.

Intrusion Detection Prevention Through event monitoring, the detection, countermeasure and prevention of possible security incidents or threats.

Continuous Monitoring Allows customers to select specific third parties which are continuously monitored, with alerts generated for significant changes in risk scores

Task Prioritization Ability to assign a priority to tasks.

Automated Threat Response Automatic response to threats.

Machine Learning Can provide deep behavioural insights.

Behavioural Analytics Includes real-time dashboard visualizations, detailed & summary reporting on user behaviour.

IOC Tools Full export capabilities are simple to execute.

IOC Consumption Ability to consume IOCs.

Malware Identification Accuracy Malware identification and fingerprinting can provide extensive and deep indicators and analysis of malware detected.

Whitelisting Blacklisting Whitelisting and blacklisting of applications and websites that are either certified to be safe, or suspected to be malicious.

Vendor Capability Ratings Average rating of all vendor capabilities, some of which may not be shown below

Usability and Intuitiveness End user learning curves cost the organization money. Pay attention to your end users' technical ability to determine how important UX is in your purchase.

Ease of Implementation Successfully implementing new software is necessary to realize its full value and promote end user adoption. This data indicates whether or not the product is easy to implement.

Breadth of Features Users prefer feature rich software that enables them to perform diverse series of tasks. This data expresses user satisfaction with the product's breadth of features.

Quality of Features Feature quality is just as important as quantity. Use this data to determine if this product will do what you're purchasing it to do, easily, intuitively, reliably, and effectively.

Ease of IT Administration This data indicates whether IT personnel will be able to resolve issues and perform configurations efficiently and effectively.

Vendor Support The importance of vendor support will vary for each organization depending on internal capabilities, but there will always be issues that only the vendor can resolve.

Ease of Data Integration Use this data to determine whether the product will cause headaches or make data integration easy.

Business Value Created Software needs to create value for employees, customers, partners, and, ultimately, shareholders. This data expresses user satisfaction - or lack thereof - with the product's business value.

Product Strategy and Rate of Improvement Vendors who don't stay on top of emerging needs and trends won't enable you to meet your business goals. Use this data to separate innovators from imposters.

Availability and Quality of Training Effective and readily available training enables users to get the most out of the software you've chosen. Use this section to make sure your vendor's training programs and materials measure up.

Ease of Customization Don't get bogged down in a difficult customization; use this data to make sure you can easily achieve the functionality you need for your particular situation.

Rapid7 Incident Command Reviews

A great product with an ease of use!

Likeliness to Recommend

Pros

Raven P.

SIEM and XDR in one go

Likeliness to Recommend

Pros

Chris G.

Great Product for monitoring environment for IOC's

Likeliness to Recommend

Pros

Most Popular Rapid7 Incident Command Comparisons

ThreatDown EDR

Crowdstrike Falcon Platform

Sophos Endpoint

Microsoft Defender for Endpoint

Trend Vision One

Palo Alto Cortex XDR

Feature Ratings

Agent Efficiency

Intrusion Detection Prevention

Continuous Monitoring

Task Prioritization

Automated Threat Response

Machine Learning

Behavioural Analytics

IOC Tools

IOC Consumption

Malware Identification Accuracy

Whitelisting Blacklisting

Vendor Capability Ratings

Usability and Intuitiveness

Ease of Implementation

Breadth of Features

Quality of Features

Ease of IT Administration

Vendor Support

Ease of Data Integration

Business Value Created

Product Strategy and Rate of Improvement

Availability and Quality of Training

Ease of Customization