Tool profile
Rapid7 InsightConnect: cost, fit and limits
Rapid7 InsightConnect is a security orchestration, automation and response product made by Rapid7, Inc. of Boston that builds no-code workflows from triggers, plugins and human decision steps for security and IT operations teams. It is sold on request.
What to know first
Rapid7 documents InsightConnect as a workflow builder with prebuilt templates, reusable snippets, human decision steps and more than 300 plugins. An orchestrator component connects on-premises systems, with setup guides for AWS and Azure. The SOAR product page shows no price and no AI features, though Rapid7 sells separate AI-driven detection offerings. Deployment details and certifications are not stated on the pages read.
Rapid7 InsightConnect at a glance
| Maker | Rapid7, Inc., United States |
|---|---|
| Free plan | No |
| Entry price | Quote only |
| API access | Yes |
| Category | Best AI SOAR Platforms in 2026, rank 9 of 10 |
| Website | rapid7.com/products/insightconnect/ |
Who Rapid7 InsightConnect is best for
Existing Rapid7 customers
Plugins and workflows reach Rapid7 detection and vulnerability products alongside third-party tools, so current customers extend what they already run.
IT and security teams sharing automation
The documentation describes workflows that automate IT and security tasks across cloud apps, on-premises systems, employees and administrators. One tool serves both groups.
Teams that want approvals in the loop
Human decision steps pause a workflow until a team member gives input, which suits cautious teams that do not want unattended containment.
Rapid7 InsightConnect plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| InsightConnect SOAR | Not shown, demo or sales contact | The product page offers Request Demo and Contact Sales buttons and no plan or price. |
| Plugin library | Not itemized | Over 300 plugins with predefined actions and triggers, with the full list in an extension library. |
| Orchestrator | Not itemized | An on-premises orchestrator that connects internal systems, with installation guides for AWS and Azure deployments in the documentation. |
Checked November 2026.
What Rapid7 InsightConnect does
- No-code workflow builder
- Workflows are made of triggers, reusable snippets and steps that map to security processes, and prebuilt templates give teams a starting point. Analysts can start from a template.
- Human decision steps
- A workflow can pause until someone approves or provides input, which keeps risky actions such as account disablement under analyst control. Analysts stay in control of the final decision.
- Plugin catalog
- More than 300 plugins offer predefined actions and triggers for security tools, utilities and public resources. Setup guides in the documentation cover products such as Microsoft Defender for Endpoint, Palo Alto firewalls, ServiceNow, Jira and VirusTotal.
- Data aggregation
- Outputs from different tools are gathered for analysis, auditing and reporting, so a case record contains everything the workflow touched. Auditors can read what happened afterward.
- Step visibility
- Each workflow step is visible, which makes errors easier to find and fix when a connector fails. Support staff can then fix broken steps without searching through logs in several different tools.
How Rapid7 InsightConnect handles your data
The product documentation and SOAR page do not state hosting regions, certifications, data retention or whether AI features use customer data. Rapid7's privacy policy names Rapid7, 120 Causeway Street, Boston, lists UK and Irish representatives, links a subprocessor list for customers and says data is kept as long as reasonably necessary. It mentions AI-generated meeting notes for its own communications but gives no statement on training. Buyers should request the subprocessor list, regions and a data processing addendum for the orchestrator and cloud service.
Where Rapid7 InsightConnect falls short in practice
- No AI on the SOAR page. The page describes workflow automation with analyst oversight and no AI features, although Rapid7 lists AI-driven detection under other products. Buyers who want agents should ask about it.
- Deployment is unclear. The product excerpt does not describe the delivery model, though the documentation covers an orchestrator and cloud plugins, so ask exactly what runs where. Ask for architecture notes.
- No public price. Only demo and sales buttons appear, which hides the cost of workflows, users and plugins. Cost therefore requires a sales call and a sizing discussion before any comparison is possible.
Works with
Alternatives to Rapid7 InsightConnect
Rapid7 InsightConnect: common questions
How many plugins does InsightConnect have?
The documentation says the platform offers over 300 plugins with predefined actions and triggers for security tools, common utilities and public resources, and points to an extension library for the full list. Check that your own tools are in the list before you plan any rollout.
Does InsightConnect require an on-premises component?
The documentation describes installing and configuring an orchestrator and deployment guides for AWS and Azure, which connects internal systems. Whether you need it depends on which tools sit inside your network. Ask for a sizing guide and system requirements for the orchestrator before a pilot.
Can InsightConnect workflows wait for human approval?
Yes. Human decision steps pause a workflow until a team member provides input. This is the main control for destructive actions, such as disabling accounts or isolating hosts. Agree the approval list with your security team before go-live so the right steps always wait for a person.
Does Rapid7 InsightConnect use AI?
The SOAR page describes no AI features. Rapid7 markets AI-driven detections and a separate AI security operations solution, so ask how, or whether, they connect to automation. Compare that with agentic tools in the same category before you decide on scope.
What does InsightConnect cost?
The product page lists no prices and offers Request Demo and Contact Sales buttons. Ask what is metered, such as workflows, actions or users, and what orchestrator licenses add. Get the answer in the quote itself. Also ask about support tiers.