Average Ratings 2 Ratings

Total
ease
features
design
support

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

By collaborating, we can effectively combat cyber attacks at every endpoint, throughout the entire organization, and wherever the conflict unfolds. Cybereason offers unparalleled visibility and precise identification of both familiar and unfamiliar threats, empowering defenders to harness the strength of genuine prevention. The platform supplies comprehensive context and correlations from the entire network, enabling defenders to become skilled threat hunters who can identify covert operations. With just a simple click, Cybereason drastically cuts down the time needed for defenders to investigate and resolve incidents through both automated processes and guided remediation. Analyzing an astounding 80 million events per second, Cybereason operates at a scale that is 100 times greater than many other market solutions. This remarkable capability allows for a reduction in investigation time by as much as 93%, empowering defenders to respond to new threats in mere minutes instead of days. Ultimately, Cybereason redefines the standards of threat detection and response, creating a safer digital landscape for all.

Description

Rapid7 Incident Command is a cloud-native, AI-powered SIEM built to replace legacy security monitoring tools. It unifies attack surface visibility, telemetry, and risk context to give security teams a clear, real-time understanding of threats. Incident Command applies advanced behavioral analytics and AI-driven triage to reduce false positives and prioritize critical incidents. The platform enriches alerts with vulnerability data, exposure scoring, and threat intelligence so analysts know exactly what to address first. Natural language search enables rapid investigation across massive volumes of security data. Incident Command correlates activity across users, endpoints, applications, and networks to reveal full attack paths. Automated SOAR workflows allow teams to isolate systems, revoke credentials, and contain threats quickly. Integrated digital forensics and incident response capabilities support deeper investigations. The platform is designed to scale across complex hybrid environments. Rapid7 Incident Command helps SOC teams detect faster, respond smarter, and operate more efficiently.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Armis Centrix Yes 
Chronicle SOAR Yes 
Google Digital Risk Protection Yes 
NorthStar Navigator Yes 
Cisco Duo No 
Cisco XDR Yes 
CyberArk Workforce Identity No 
Cynerio No 
Delinea Cloud Access Controller No 
Imperva DDoS Protection No 
Medigate No 
NXLog No 
Proofpoint Adaptive Email Security No 
Rapid7 Command Platform No 
SOCRadar Extended Threat Intelligence No 
Squadcast No 
The Respond Analyst No 
ThreatConnect Risk Quantifier (RQ) Yes 
ThreatQ Yes 

Integrations

Armis Centrix Yes 
Chronicle SOAR Yes 
Google Digital Risk Protection Yes 
NorthStar Navigator Yes 
Cisco Duo Yes 
Cisco XDR No 
CyberArk Workforce Identity Yes 
Cynerio Yes 
Delinea Cloud Access Controller Yes 
Imperva DDoS Protection Yes 
Medigate Yes 
NXLog Yes 
Proofpoint Adaptive Email Security Yes 
Rapid7 Command Platform Yes 
SOCRadar Extended Threat Intelligence Yes 
Squadcast Yes 
The Respond Analyst Yes 
ThreatConnect Risk Quantifier (RQ) No 
ThreatQ No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version Yes 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App Yes 
iPad App Yes 
Android App Yes 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Cybereason

Founded

2012

Country

United States

Website

www.cybereason.com

Vendor Details

Company Name

Rapid7

Founded

2000

Country

United States

Website

www.rapid7.com/products/siem/

Product Features

Cybersecurity

AI / Machine Learning No 
Behavioral Analytics No 
Endpoint Management No 
IOC Verification No 
Incident Management No 
Tokenization No 
Vulnerability Scanning No 
Whitelisting / Blacklisting No 

Endpoint Detection and Response (EDR)

Behavioral Analytics No 
Blacklisting/Whitelisting No 
Continuous Monitoring No 
Malware/Anomaly Detection No 
Prioritization No 
Remediation Management No 
Root Cause Analysis No 

Endpoint Protection

Activity Log No 
Antivirus No 
Application Security No 
Behavioral Analytics No 
Device Management No 
Encryption No 
Signature Matching No 
Web Threat Management No 
Whitelisting / Blacklisting No 

Incident Response

Attack Behavior Analytics No 
Automated Remediation No 
Compliance Reporting No 
Forensic Data Retention No 
Incident Alerting No 
Incident Database No 
Incident Logs No 
Incident Reporting No 
Privacy Breach Reporting No 
SIEM Data Ingestion / Correlation No 
SLA Tracking / Management No 
Security Orchestration No 
Threat Intelligence No 
Timeline Analysis No 
Workflow Automation No 
Workflow Management No 

IT Security

Anti Spam No 
Anti Virus Yes 
Email Attachment Protection No 
Event Tracking No 
IP Protection No 
Internet Usage Monitoring No 
Intrusion Detection System No 
Spyware Removal No 
Two-Factor Authentication No 
Vulnerability Scanning No 
Web Threat Management No 
Web Traffic Reporting No 

Network Security

Access Control No 
Analytics / Reporting No 
Compliance Reporting No 
Firewalls No 
Internet Usage Monitoring No 
Intrusion Detection System No 
Threat Response No 
VPN No 
Vulnerability Scanning No 

Product Features

Endpoint Detection and Response (EDR)

Behavioral Analytics Yes 
Blacklisting/Whitelisting No 
Continuous Monitoring No 
Malware/Anomaly Detection Yes 
Prioritization No 
Remediation Management Yes 
Root Cause Analysis No 

Incident Response

Attack Behavior Analytics No 
Automated Remediation No 
Compliance Reporting No 
Forensic Data Retention No 
Incident Alerting No 
Incident Database No 
Incident Logs No 
Incident Reporting No 
Privacy Breach Reporting No 
SIEM Data Ingestion / Correlation No 
SLA Tracking / Management No 
Security Orchestration No 
Threat Intelligence No 
Timeline Analysis No 
Workflow Automation No 
Workflow Management No 

Network Traffic Analysis (NTA)

Anomalous Behavior Detection No 
High Bandwidth Usage Monitoring No 
Historical Behavior Data No 
Identify High Network Traffic Sources No 
Network Transaction Visibility No 
Stream Data to IDR or Data Lake No 
Traffic Decryption No 

SIEM

Application Security No 
Behavioral Analytics Yes 
Compliance Reporting No 
Endpoint Management Yes 
File Integrity Monitoring No 
Forensic Analysis No 
Log Management Yes 
Network Monitoring Yes 
Real Time Monitoring Yes 
Threat Intelligence Yes 
User Activity Monitoring Yes 

Alternatives

Alternatives

Alert Logic Reviews

Alert Logic

Fortra