FortiSIEM vs Rapid7 InsightIDR

FortiSIEM9.0Visit Rapid7 InsightIDR8.9Visit

Higher score FortiSIEM #3 in SIEM Software 9.0/10 Pricing on request ✓ 2 of 2 features Visit FortiSIEM

vs

Rapid7 InsightIDR #4 in SIEM Software 8.9/10 Pricing on request ✓ 2 of 2 features Visit Rapid7

• FortiSIEM fits best

  Hybrid IT/OT security operations

• Rapid7 InsightIDR fits best

  Teams seeking integrated detection and incident response

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature	FortiSIEM 9.0/10 Visit ↗	Rapid7 InsightIDR 8.9/10 Visit ↗
At a glance
Editor score	9.0	8.9
Ranking	#3 in SIEM Software	#4 in SIEM Software
Best for	Hybrid IT/OT security operations	Teams seeking integrated detection and incident response
Pricing model	Paid	Paid
Starting price	Pricing on request	—
Free plan	Not checked yet	Not checked yet
Free trial	—	—
Deployment	Cloud, Self-hosted	Cloud, Self-hosted
Platforms	Web	Web
Integrations	6 integrations	8 integrations
Features FortiSIEM 2/2 · Rapid7 InsightIDR 2/2
Custom detection rules	✓	✓
Real-time alerting	✓	✓
Specs
Free ingestion limit	Not checked yet	Not checked yet
Data retention	Not checked yet	90 days
Deployment	Hybrid	Cloud
Query language	Not checked yet	Log Entry Query Language (LEQL)
Our review
Pros	Collects and correlates events across multivendor IT and OT environments Combines UEBA, machine-learning detection, and customizable rules Includes asset discovery, case management, and SOAR playbooks	Combines log search with built-in and custom detection rules Links endpoint, network, identity, and cloud activity in investigations Offers response automation, threat intelligence, and MITRE ATT&CK mapping
Cons	Pricing requires contacting sales Its broad IT/OT scope may exceed needs of narrower SIEM deployments Deployment options and capabilities may require evaluation for each environment	Pricing requires contacting sales Essentials lists 90 days of log retention; longer retention is in higher packages Advanced features such as AI triage and deception technology require Advanced
Our verdict	FortiSIEM is Fortinet’s security information and event management platform for enterprises, managed security service providers, and organizations operating both IT and operational technology environments. It brings together event… Read the review →	Security operations teams looking to bring detection and incident response into one SIEM can consider Rapid7 InsightIDR. It collects and correlates logs, endpoint telemetry, network data, authentication activity, and cloud-service events,… Read the review →

Strengths and trade-offs

• FortiSIEM — where it wins

  • Collects and correlates events across multivendor IT and OT environments
  • Combines UEBA, machine-learning detection, and customizable rules
  • Includes asset discovery, case management, and SOAR playbooks

  Where it doesn't

  • Pricing requires contacting sales
  • Its broad IT/OT scope may exceed needs of narrower SIEM deployments
  • Deployment options and capabilities may require evaluation for each environment

• Rapid7 InsightIDR — where it wins

  • Combines log search with built-in and custom detection rules
  • Links endpoint, network, identity, and cloud activity in investigations
  • Offers response automation, threat intelligence, and MITRE ATT&CK mapping

  Where it doesn't

  • Pricing requires contacting sales
  • Essentials lists 90 days of log retention; longer retention is in higher packages
  • Advanced features such as AI triage and deception technology require Advanced

• FortiSIEM9.0/10 · Pricing on request

  A broad IT/OT SIEM with multivendor collection, analytics, case management, and SOAR.

  Visit FortiSIEMFull verdict →
• Rapid7 InsightIDR8.9/10 · Pricing on request

  A broad SIEM with investigation and response tools, sold in three Incident Command packages.

  Visit Rapid7Full verdict →