Datadog Cloud SIEM vs Rapid7 InsightIDR

DSDatadog Cloud SIEM9.0Visit Rapid7 InsightIDR7.3Visit

Higher score DS Datadog Cloud SIEM #2 in Threat Hunting Software 9.0/10 From $5/mo (annual) · 14-day trial ✓ 4 of 4 features Visit Datadog

vs

Rapid7 InsightIDR #4 in Threat Hunting Software 7.3/10 Pricing on request ✓ 0 of 4 features Visit Rapid7

• Datadog Cloud SIEM fits best

  Cloud-first SOCs needing mature analytics

• Rapid7 InsightIDR fits best

  SOC teams wanting complete investigation workflows

Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. It never changes our verdict. How we rank.

Side by side

Feature	DSDatadog Cloud SIEM 9.0/10 Visit ↗	Rapid7 InsightIDR 7.3/10 Visit ↗
At a glance
Editor score	9.0	7.3
Ranking	#2 in Threat Hunting Software	#4 in Threat Hunting Software
Best for	Cloud-first SOCs needing mature analytics	SOC teams wanting complete investigation workflows
Pricing model	Paid	Paid
Starting price	Not published	Not published
Free plan	—	Not published
Free trial	—	—
Deployment	Cloud	Cloud, Self-hosted
Platforms	Web	Web
Integrations	1,000+ integrations	8 integrations
Features Datadog Cloud SIEM 4/4 · Rapid7 InsightIDR 0/4
Endpoint telemetry	✓ (best)	Not published
Cloud telemetry	✓ (best)	Not published
Network telemetry	✓ (best)	Not published
Investigation cases	✓ (best)	Not published
Specs
Hunting query language	Sql	Not published
Searchable retention	365 days	Not published
Our review
Pros	800+ MITRE ATT&CK-mapped detection rules and SQL detections UEBA, risk scoring, and graph-based cloud investigations Case management, SOAR integrations, and 1,000 integrations	Combines log search, behavior analytics, EDR, and network analysis Supports custom detection rules, incident timelines, and MITRE ATT&CK mapping Advanced and Ultimate add AI triage or full XDR capabilities
Cons	Usage-based billing can make monthly costs vary with log volume Workflow automation is billed separately from SIEM plans Cloud deployment does not suit teams requiring an on-premises service	Pricing requires contacting sales Essentials lists 90 days of log retention; longer retention requires an add-on Full XDR capabilities are limited to the Ultimate package
Our verdict	Datadog Cloud SIEM is a cloud-delivered security information and event management service for security operations, development, and operations teams. It ingests security and operational logs from cloud and on-premises environments,… Read the review →	Rapid7 InsightIDR is a cloud-native SIEM for security operations teams investigating activity across logs, endpoints, networks, authentication, and cloud services. Its workflow spans log collection and search, built-in and custom detection… Read the review →

Strengths and trade-offs

• Datadog Cloud SIEM — where it wins

  • 800+ MITRE ATT&CK-mapped detection rules and SQL detections
  • UEBA, risk scoring, and graph-based cloud investigations
  • Case management, SOAR integrations, and 1,000 integrations

  Where it doesn't

  • Usage-based billing can make monthly costs vary with log volume
  • Workflow automation is billed separately from SIEM plans
  • Cloud deployment does not suit teams requiring an on-premises service

• Rapid7 InsightIDR — where it wins

  • Combines log search, behavior analytics, EDR, and network analysis
  • Supports custom detection rules, incident timelines, and MITRE ATT&CK mapping
  • Advanced and Ultimate add AI triage or full XDR capabilities

  Where it doesn't

  • Pricing requires contacting sales
  • Essentials lists 90 days of log retention; longer retention requires an add-on
  • Full XDR capabilities are limited to the Ultimate package

• DSDatadog Cloud SIEM9.0/10 · From $5/mo (annual) · 14-day trial

  A cloud-first SIEM with SQL detections, MITRE-mapped rules, UEBA, and AI investigations.

  Visit DatadogFull verdict →
• Rapid7 InsightIDR7.3/10 · Pricing on request

  A broad SIEM investigation workflow, with capabilities that expand by package.

  Visit Rapid7Full verdict →