Index › Security operations › SOAR › Rapid7 InsightConnect vs Splunk SOAR

SOAR platforms · October 2026 Edition

Rapid7 InsightConnect vs Splunk SOAR

Zero of fourteen models named Rapid7 InsightConnect first on the direct prompt; zero named Splunk SOAR. Rapid7 InsightConnect was named by eleven of the fourteen models and Splunk SOAR by fourteen and Rapid7 InsightConnect carries 18 labels and Splunk SOAR 61, so the shares are not directly comparable.

Rapid7 InsightConnect

accepted challenger

Named in one category this edition.

Splunk SOAR

criticized challenger

Named in two categories this edition.

First-choice share3%2%Of first choices across the direct, paraphrase, budget and scale prompts, 0 to 100.

Negative rate17%44%Negative labels as a share of the product's labels, 0 to 100.

Rank in category#6#8A position in a field of 11; printed, not drawn.

Labels1861A count; the two differ.

The two percentage rows are drawn on one 0 to 100 track, Rapid7 InsightConnect reading right to left. Rank and label count are printed, not drawn.Tines was named alongside these two in eleven of the fourteen direct answers. Tines vs Rapid7 InsightConnect · Tines vs Splunk SOAR · Shuffle vs Rapid7 InsightConnect

Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the SOAR platforms page.

By framing

How many of the fourteen models made each the first choice, per way of asking, and how many argued against it.

Rapid7 InsightConnectFirst choices, of fourteen modelsSplunk SOAR

Direct005 against Splunk SOAR

Paraphrase214 against Splunk SOAR

Comparative02

Budget-constrained003 against Splunk SOAR

Scale-constrained002 against Splunk SOAR

Negative003 against Rapid7 InsightConnect · 13 against Splunk SOAR

Bars are first choices, 0 to 14 each sideModels that argued againstA model can name both, so the two sides of a row do not sum to fourteen.

Across every category in the October 2026 Edition, Rapid7 InsightConnect and Splunk SOAR were named in the same answer thirty-seven times, of the 50 answers naming Rapid7 InsightConnect and the 197 naming Splunk SOAR. In those answers Splunk SOAR took the first choice four times and Rapid7 InsightConnect two.

Every model, every framing

The eighty-four answers behind the chart above, one cell each: where Rapid7 InsightConnect and Splunk SOAR stood in it.

Model	Direct	Paraphrase	Comparative	Budget-constrained	Scale-constrained	Negative
Claude Haiku 4.5
GPT-5.4 mini
Gemini 3.5 Flash
Perplexity Sonar
Grok 4.1 Fast
Mistral Small
DeepSeek V4 Flash
Llama 4 Maverick
Qwen 3.7 Flash
Kimi K2
GLM 4.7 FlashX
MiniMax M2.5
GPT-6 Luna
Muse Glimmer 30B

Rapid7 InsightConnect

Splunk SOAR

first choice

named as an alternative

argued againstblank: not namedEach cell is one answer, Rapid7 InsightConnect on the left and Splunk SOAR on the right.

The direct prompt

The plain question, one answer per model, grouped by where Rapid7 InsightConnect and Splunk SOAR stood in it.

Neither was the first choice, one was named

10 of 14 modelsThe answer put something else first and named one of the two as an alternative.

Claude Haiku 4.5Swimlane Turbine, Torq alternatives: Cortex XSOAR, FortiSOAR, Splunk SOAR, Tines

GPT-5.4 miniTines, Torq alternatives: Cortex XSOAR, Microsoft Sentinel, Splunk SOAR

Grok 4.1 FastSwimlane Turbine alternatives: Microsoft Sentinel, Rapid7 InsightConnect

Mistral SmallSwimlane Turbine, Torq alternatives: Microsoft Sentinel, Splunk SOAR, Tines

DeepSeek V4 FlashTines alternatives: Microsoft Sentinel, Rapid7 InsightConnect, Swimlane Turbine

Kimi K2Tines alternatives: Microsoft Sentinel, Rapid7 InsightConnect, Swimlane Turbine, Torq

GLM 4.7 FlashXCortex XSOAR, Tines alternatives: Microsoft Sentinel, Splunk SOAR, Swimlane Turbine

MiniMax M2.5Swimlane Turbine alternatives: FortiSOAR, Microsoft Sentinel, Splunk SOAR, Torq

GPT-6 LunaTines alternatives: Cortex XSOAR, Microsoft Sentinel's built-in automation, Splunk SOAR

Muse Glimmer 30BSwimlane Turbine, Tines, Torq alternatives: Cortex XSOAR, Microsoft Sentinel, Splunk SOAR

Neither was named

4 of 14 modelsThe answer made no first choice from these two in this category.

Gemini 3.5 FlashTines alternatives: BlinkOps, Radiant Security, Swimlane Turbine, Torq

Perplexity SonarD3 Security Smart SOAR alternatives: ManageEngine Log360, ThreatConnect

Llama 4 MaverickTines

Qwen 3.7 FlashTines alternatives: Microsoft Sentinel, Swimlane Turbine

Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.

By buyer segment

The same question asked on behalf of a different buyer. Each standing is computed within its segment and they are never added together. The figures above are the mid-market standing, which is the one the category orders by.

Small business

Splunk SOAR leads by two points.

Splunk SOAR#7 of 11

Rapid7 InsightConnect#8 of 11

The full small business standing →

Mid-marketThe figures above

The order flips: Rapid7 InsightConnect leads at mid-market.

Rapid7 InsightConnect#6 of 11

Splunk SOAR#8 of 11

The full mid-market standing →

Enterprise

The order flips: Splunk SOAR leads at enterprise.

Splunk SOAR#2 of 11

Rapid7 InsightConnect#9 of 11

The full enterprise standing →

What the models said about Rapid7 InsightConnect

Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of seven in this category shown.

“These are often marketing checkboxes, not true orchestration platforms.” DeepSeek V4 Flash · negative prompt · hard negative

“Limited customization... Scalability concerns: Becomes expensive as log volume increases” GLM 4.7 FlashX · negative prompt · soft negative

“older Rapid7 InsightConnect) — Proceed with Caution” Gemini 3.5 Flash · negative prompt · soft negative

“I would recommend starting with Rapid7 InsightConnect or Microsoft Sentinel as your top choices” MiniMax M2.5 · paraphrase prompt · first choice

“1. Rapid7 InsightConnect (Best Overall for Mid-Market)” Claude Haiku 4.5 · paraphrase prompt · first choice

“Simple for SMBs/SOCs with limited resources; flexible pricing and easy playbook building” Grok 4.1 Fast · paraphrase prompt · alternative

What the models said about Splunk SOAR

Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.

“avoid: ... Splunk SOAR: Only makes financial and operational sense if your company is already heavily standardized on Splunk” Gemini 3.5 Flash · direct prompt · hard negative

“Integration with Splunk Enterprise Security (ES) is described as "hacky" and problematic” Mistral Small · negative prompt · hard negative

“these are generally not recommended for mid-sized organizations” Gemini 3.5 Flash · paraphrase prompt · hard negative

“Cortex XSOAR and Splunk SOAR are repeatedly positioned as top-tier enterprise platforms” Perplexity Sonar · comparative prompt · first choice

“I'd usually recommend Splunk SOAR if you already have a heterogeneous security stack” GPT-5.4 mini · paraphrase prompt · first choice

“Splunk SOAR leads in the number of connectors and actions” Mistral Small · comparative prompt · first choice

Also compared

Tines vs Rapid7 InsightConnect Tines vs Splunk SOAR Shuffle vs Rapid7 InsightConnect Shuffle vs Splunk SOAR Swimlane Turbine vs Rapid7 InsightConnect Swimlane Turbine vs Splunk SOAR Torq vs Rapid7 InsightConnect Torq vs Splunk SOAR Cortex XSOAR vs Rapid7 InsightConnect Cortex XSOAR vs Splunk SOAR Rapid7 InsightConnect vs Microsoft Sentinel Microsoft Sentinel vs Splunk SOAR All twenty-eight head-to-head pages and the full SOAR standing

Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.