# Rapid7 InsightIDR: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 41 judge labels across 4 categories by 14 of 14 models. Page: https://www.gane.ai/index/it/vendors/rapid7-insightidr

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [SIEM platforms](https://www.gane.ai/index/it/security/siem-platforms/index.md) | 8% | 3 | 4% | 28 |
| [Network detection and response](https://www.gane.ai/index/it/security/network-detection-and-response/index.md) | 4% | 5 | 0% | 6 |
| [Extended detection and response](https://www.gane.ai/index/it/security/extended-detection-and-response/index.md) | 0% | 21 | 20% | 5 |
| [Endpoint protection](https://www.gane.ai/index/it/operations/endpoint-protection/index.md) | 0% | 89 | 100% | 2 |

## What the models said for it

- "Flowmon or Rapid7 InsightIDR offer the best balance of features, price, and ease of implementation" (GLM 4.7 FlashX, NDR)
- "Best if your team needs a capable SIEM without the operational burden of enterprise platforms" (Claude Haiku 4.5, SIEM)
- "If I had to pick one without knowing your stack, I'd start with Rapid7 InsightIDR" (GPT-6 Luna, SIEM)
- "Rapid7 InsightIDR or Microsoft Sentinel would be the top recommendations" (MiniMax M2.5, SIEM)

## And against it

- "This falls below the 90% threshold required for certification, resulting in failed certification" (MiniMax M2.5, Endpoint protection)
- "Its embedded endpoint protection often underperforms in pure malware detection tests." (Qwen 3.7 Flash, Endpoint protection)
- "may be unsuitable if your architecture requires fully on-premises deployment" (Perplexity Sonar, SIEM)
- "per-endpoint + ingestion models (Palo Alto, Rapid7) that carry budget risk" (DeepSeek V4 Flash, XDR)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 1 | 0 | 2 | 0 | 3 |
| GPT-5.4 mini | 0 | 0 | 1 | 0 | 1 |
| Gemini 3.5 Flash | 1 | 2 | 0 | 0 | 3 |
| Perplexity Sonar | 1 | 3 | 0 | 1 | 5 |
| Grok 4.20 | 0 | 4 | 1 | 0 | 5 |
| Mistral Small | 0 | 2 | 0 | 0 | 2 |
| DeepSeek V4 Flash | 0 | 3 | 1 | 1 | 5 |
| Llama 4 Maverick | 0 | 2 | 0 | 0 | 2 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 1 | 1 |
| Kimi K2 | 0 | 3 | 1 | 0 | 4 |
| GLM 4.7 FlashX | 1 | 0 | 0 | 0 | 1 |
| MiniMax M2.5 | 1 | 0 | 1 | 1 | 3 |
| GPT-6 Luna | 1 | 1 | 0 | 0 | 2 |
| Muse Glimmer 30B | 0 | 3 | 1 | 0 | 4 |

## Sources returned with these answers

The sites and pages cited by the answers that named Rapid7 InsightIDR, from 88 of the 95 answers that named it (only the models that return a source list).

### Domains cited

- g2.com: 30
- manageengine.com: 24
- techrepublic.com: 23
- cotocus.com: 22
- microsoft.com: 22
- paloaltonetworks.com: 22
- exabeam.com: 21
- senseon.io: 20
- aimultiple.com: 19
- expertinsights.com: 19

### Pages cited

- https://techrepublic.com/article/siem-tools: 22
- https://cotocus.com/blog/top-10-network-detection-and-response-ndr-tools-in-2025-features-pros-cons-comparison: 20
- https://senseon.io/blog/5-best-siem-tools: 20
- https://g2.com/categories/network-detection-and-response-ndr/small-business: 18
- https://aimultiple.com/siem-tools: 16
- https://manageengine.com/log-management/top-siem-tools.html: 16
- https://paloaltonetworks.com/cyberpedia/siem-tools-comparison: 15
- https://underdefense.com/blog/siem-solutions-comparison: 15

## In its own words

What Rapid7 InsightIDR's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.

- Positioning: your security center for incident detection and response, authentication monitoring, and endpoint visibility (https://docs.rapid7.com/insightidr)
- For: security teams (https://docs.rapid7.com/insightidr)
- Hosting: Amazon Web Services (AWS)

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.