Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

Head-to-head · Threat Hunting Software

Rapid7 InsightIDR vs Darktrace / NETWORK

  • Updated Oct 2026
  • Both researched from official sources
  • 3 checks side by side
Higher score Rapid7 InsightIDR #3 in Threat Hunting Software 9.2/10 Pricing on request ✓ 0 of 4 features Visit Rapid7
Darktrace / NETWORK #8 in Threat Hunting Software 8.7/10 Pricing on request ✓ 3 of 4 features Visit Darktrace

Rapid7 InsightIDR leads on 0 checks, Darktrace / NETWORK on 0, and 3 are even. Who comes out ahead on the 3 yes/no, price and count checks where we have data for both products. The editor score weighs everything else too.

Our verdict

  • Highest scoreRapid7 InsightIDR · 9.2/10
  • Most featuresDarktrace / NETWORK · 3 of 4

Rapid7 InsightIDR scores higher on our rubric for threat hunting software: 9.2 against 8.7 out of 10; our editors rank them #3 and #8.

Rapid7 InsightIDR is the better fit for SOC teams wanting complete investigation workflows. Darktrace / NETWORK is the better fit for AI-led hybrid-network threat investigations.

  • Rapid7 InsightIDR fits best

    SOC teams wanting complete investigation workflows

  • Darktrace / NETWORK fits best

    AI-led hybrid-network threat investigations

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature Rapid7 InsightIDR 9.2/10 Visit ↗ Darktrace / NETWORK 8.7/10 Visit ↗
At a glance
Editor score 9.2 8.7
Ranking #3 in Threat Hunting Software #8 in Threat Hunting Software
Best for SOC teams wanting complete investigation workflows AI-led hybrid-network threat investigations
Pricing model Paid Paid
Starting price — Pricing on request
Free plan Not checked yet Not checked yet
Free trial — —
Integrations 8 integrations 8 integrations
Features Rapid7 InsightIDR 0/4 · Darktrace / NETWORK 3/4
Endpoint telemetry Not checked yet ✓ (best)
Cloud telemetry Not checked yet ✓ (best)
Network telemetry Not checked yet ✓ (best)
Investigation cases Not checked yet Not checked yet
Specs
Hunting query language Not checked yet Not checked yet
Searchable retention Not checked yet Not checked yet
Our review
Pros
  • Combines log search, behavior analytics, EDR, and network analysis
  • Supports custom detection rules, incident timelines, and MITRE ATT&CK mapping
  • Advanced and Ultimate add AI triage or full XDR capabilities
  • Behavioral profiles span networks, cloud, OT, endpoints and identities.
  • Correlates cross-domain events for AI-driven investigations.
  • Configurable containment connects native and third-party response tools.
Cons
  • Pricing requires contacting sales
  • Essentials lists 90 days of log retention; longer retention requires an add-on
  • Full XDR capabilities are limited to the Ultimate package
  • Pricing uses a contact-sales model rather than published plan rates.
  • Its broad scope is aimed at mid-market and enterprise environments.
  • May exceed the needs of teams seeking network-only threat hunting.
Our verdict

Rapid7 InsightIDR is a cloud-native SIEM for security operations teams investigating activity across logs, endpoints, networks, authentication, and cloud services. Its workflow spans log collection and search, built-in and custom detection…

Read the review →

Darktrace / NETWORK, presented on Darktrace’s site as Darktrace / HYBRID NETWORK, is a network detection and response product for organizations securing hybrid infrastructure. It passively ingests traffic from on-premises and virtual…

Read the review →
  1. Rapid7 InsightIDRThreat Hunting Software 9.2Pricing on request
  2. Darktrace / NETWORKThreat Hunting Software 8.7Pricing on request

Strengths and trade-offs

  • Rapid7 InsightIDR — where it wins

    • Combines log search, behavior analytics, EDR, and network analysis
    • Supports custom detection rules, incident timelines, and MITRE ATT&CK mapping
    • Advanced and Ultimate add AI triage or full XDR capabilities

    Where it doesn't

    • Pricing requires contacting sales
    • Essentials lists 90 days of log retention; longer retention requires an add-on
    • Full XDR capabilities are limited to the Ultimate package

  • Darktrace / NETWORK — where it wins

    • Behavioral profiles span networks, cloud, OT, endpoints and identities.
    • Correlates cross-domain events for AI-driven investigations.
    • Configurable containment connects native and third-party response tools.

    Where it doesn't

    • Pricing uses a contact-sales model rather than published plan rates.
    • Its broad scope is aimed at mid-market and enterprise environments.
    • May exceed the needs of teams seeking network-only threat hunting.
  • Rapid7 InsightIDR9.2/10 · Pricing on request

    A broad SIEM investigation workflow, with capabilities that expand by package.

    Visit Rapid7Full verdict →
  • Darktrace / NETWORK8.7/10 · Pricing on request

    A cross-domain threat hunting platform for investigating hybrid-network anomalies.

    Visit DarktraceFull verdict →

More comparisons

All threat hunting software comparisons → · Full ranking →

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Last updated · How we research and update