SIEM platforms · September 2026 Edition
Rapid7 InsightIDR vs Wazuh
Seven of twelve models named Rapid7 InsightIDR first on the direct prompt; zero named Wazuh. Rapid7 InsightIDR was named by eleven of the twelve models and Wazuh by ten and Rapid7 InsightIDR carries 28 labels and Wazuh 15, so the shares are not directly comparable.
Named in two categories this edition.
Named in nine categories this edition.
First-choice share22%18%Of first choices across the direct, paraphrase, budget and scale prompts, 0 to 100.
Negative rate4%7%Negative labels as a share of the product's labels, 0 to 100.
Rank in category#2#3A position in a field of 16; printed, not drawn.
Labels2815A count; the two differ.
The two percentage rows are drawn on one 0 to 100 track, Rapid7 InsightIDR reading right to left. Rank and label count are printed, not drawn.Microsoft Sentinel was named alongside these two in twelve of the twelve direct answers. Microsoft Sentinel vs Rapid7 InsightIDR · Microsoft Sentinel vs Wazuh
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all twelve models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the SIEM platforms page.
By framing
How many of the twelve models made each the first choice, per way of asking, and how many argued against it.
Rapid7 InsightIDRFirst choices, of twelve modelsWazuh
Direct70
Paraphrase30
Comparative00
Budget-constrained091 against Rapid7 InsightIDR
Scale-constrained10
Negative001 against Wazuh
Bars are first choices, 0 to 12 each sideModels that argued againstA model can name both, so the two sides of a row do not sum to twelve.
The direct prompt
The plain question, one answer per model, grouped by where Rapid7 InsightIDR and Wazuh stood in it.
Rapid7 InsightIDR first, Wazuh not the choice
7 of 12 modelsWazuh was named in the answer but not as the choice, or not at all.Grok 4.1 FastRapid7 InsightIDR alternatives: Blumira, Elastic Security, LogRhythm, ManageEngine Log360, Microsoft Sentinel
Mistral SmallMicrosoft Sentinel, Rapid7 InsightIDR alternatives: ManageEngine Log360
DeepSeek V4 FlashMicrosoft Sentinel, Rapid7 InsightIDR alternatives: CrowdStrike Falcon Next-Gen SIEM, Elastic Security, LogRhythm
Llama 4 MaverickMicrosoft Sentinel, Rapid7 InsightIDR alternatives: ManageEngine Log360
Qwen 3.7 FlashMicrosoft Sentinel, Rapid7 InsightIDR alternatives: LogRhythm
Kimi K2Rapid7 InsightIDR alternatives: CrowdStrike Falcon Next-Gen SIEM, Elastic Security, Google Security Operations, Microsoft Sentinel
MiniMax M2.5Microsoft Sentinel, Rapid7 InsightIDR alternatives: Elastic Security, LogRhythm
Neither was the first choice, one was named
4 of 12 modelsThe answer put something else first and named one of the two as an alternative.Claude Haiku 4.5ManageEngine Log360 alternatives: Blumira, Microsoft Sentinel, Rapid7 InsightIDR
Gemini 3.5 FlashBlumira, Huntress Managed SIEM, Microsoft Sentinel alternatives: Rapid7 InsightIDR, Sumo Logic
Perplexity SonarMicrosoft Sentinel alternatives: Rapid7 InsightIDR
GLM 4.7 FlashXMicrosoft Sentinel alternatives: Elastic Security, IBM QRadar, LogRhythm, Rapid7 InsightIDR
Neither was named
1 of 12 modelsThe answer made no first choice from these two in this category.GPT-5.4 miniMicrosoft Sentinel alternatives: Google Security Operations, Splunk Enterprise Security
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment and they are never added together. The figures above are the mid-market standing, which is the one the category orders by.
Small business
Wazuh leads by seventeen points.
Wazuh17%#3 of 14Rapid7 InsightIDR0%#9 of 14Mid-marketThe figures above
The order flips: Rapid7 InsightIDR leads at mid-market.
Rapid7 InsightIDR22%#2 of 16Wazuh18%#3 of 16Enterprise
Rapid7 InsightIDR leads by eleven points.
Rapid7 InsightIDR11%#4 of 12Wazuh0%#– of 12What the models said about Rapid7 InsightIDR
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Four of five in this category shown.
“good for SMBs but starts around $2.5K+/month” DeepSeek V4 Flash · budget prompt · soft negative
“Rapid7 InsightIDR tops many lists ... for mid-sized orgs due to asset pricing (no surprise bills as logs grow), included MDR ... and simplicity” Grok 4.1 Fast · direct prompt · first choice
“Rapid7 InsightIDR is a good choice for organizations looking for a cloud-native SIEM solution with built-in UEBA and SOAR capabilities” Llama 4 Maverick · direct prompt · first choice
“Highly recommended for mid-market teams seeking a user-friendly, cloud-native SIEM with built-in UEBA and SOAR capabilities” Mistral Small · direct prompt · first choice
What the models said about Wazuh
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Four of four in this category shown.
“Use with extreme caution: Wazuh (only if you have engineering resources)” Qwen 3.7 Flash · negative prompt · soft negative
“Wazuh is one of the most popular open-source SIEM platforms available today... the software is completely free to use, making it attractive for organizations with limited budgets.” Claude Haiku 4.5 · budget prompt · first choice
“If you have zero budget for software licenses but have a capable, Linux-savvy system administrator on your team, Wazuh is the undisputed champion.” Gemini 3.5 Flash · budget prompt · first choice
“the strongest overall pick is usually Wazuh if you can handle some engineering and operations work, because it has no software license cost” Perplexity Sonar · budget prompt · first choice
Also compared
Comparisons are drawn for the top three products in each category. The output is the models' output; nothing here is a recommendation by the index.