Rapid7 InsightConnect vs Shuffle
Rapid7 InsightConnect
rapid7.comShuffle
shuffler.ioSide by side
| Figure | Rapid7 InsightConnect | Shuffle |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · Runbook Automation Software | 7.6 (#7) | 7.6 (#8) |
| Spec score · Security Orchestration, Automation, and Response Software | 7.5 (#7) | 7.6 (#6) |
| Audience | Rapid7’s documentation recommends its SOC success plan for InsightIDR users and its VM success plan for InsightVM users. | Shuffle says it was created to address automation problems in the CERT/SIRT community and aims to help security operations centers share processes, automations, and detections. |
| Integrations | Rapid7 says InsightConnect has over 300 plugins with predefined actions and triggers for connecting tools, utilities, and public resources. | Shuffle's public app catalog lists more than 2,500 apps, including integrations such as Slack, Gmail, MISP, Wazuh, Splunk, and Jira. |
| Purpose | Automation (InsightConnect) is a SOAR solution for integrating technologies, people, and processes into automated security workflows. | Shuffle is an open-source automation platform designed for the security industry, for building and executing automation workflows. |
| Support | Rapid7 lists a Product Support Portal and a product support phone number of +1-866-390-8113. | The pricing page lists Shuffle Support with SLA and email support for Business, with on-call support and an alert mechanism additionally listed for Enterprise. |
Plans
Rapid7 InsightConnect
- Automation (InsightConnect) 30 day free trialFree
In their own words
Rapid7 InsightConnect
Rapid7 InsightConnect is a security orchestration, automation, and response product for building workflows across technologies, people, and processes. It provides templates, a no-code builder, and visibility into workflow steps. Rapid7 lists more than 300 plugins with predefined actions and triggers. Example workflows include phishing investigations, disabling Active Directory users, vulnerability remediation, and incident response. Workflows can include manual tasks and require human authorization before automated actions proceed. Some run entirely in Insight Cloud; many need an Orchestrator server in the customer’s network or cloud environment. That server runs on a virtualized Ubuntu appliance or dedicated RHEL host, and plugins require Docker Community Edition. Listed platforms include API, Linux, self-hosted, and web, and Rapid7 supports the latest stable versions of Firefox and Chrome. A 30-day free trial is listed at free, but workflows in the listed toolkits require an InsightConnect license. The product is hybrid, and pricing is available on request.
Shuffle
Shuffle is an open-source automation platform for security teams to build and run workflows. Its visual designer works with a no-code app creator that can generate integrations from Swagger or OpenAPI specifications and API documentation URLs. The public catalog contains more than 2,500 apps, including Slack, Gmail, MISP, Wazuh, Splunk, and Jira. Workflows can start through webhooks, schedules, subflows, or user input; extension triggers include AWS Lambda, AWS S3, Kafka, and Pub/Sub.
Deployment choices include self-hosted open source, self-hosted licensed software, Shuffle Cloud, and hybrid setups. Documented runtime architectures include Docker Compose, Docker Swarm, a cloud-hybrid local Orborus runner, and Kubernetes with Helm charts. Shuffle documents bcrypt password hashing, AES-256 encryption, tenant-controlled SAML/SSO and MFA, and a Bearer-token API. The free Scale plan is free and includes 2,000 app runs per month, with a hard limit, three tenants, and one location. Custom Python apps are not yet easy to create for Shuffle Cloud, though on-premises instances support local app hotloading.