Rapid7
Insight Platform
Rapid7 created Metasploit Framework and the cloud-based Insight Platform. The platform puts VM (InsightVM), SIEM/XDR (InsightIDR), CNAPP, AppSec and SOAR in one place for the SOC.
What the Insight Platform includes.
Rapid7 Insight is a cloud platform that brings together VM, SIEM, AppSec, Cloud Security and SOAR.
Key capabilities.
Real Risk Score
Rapid7’s own risk score combines CVSS, exploit availability in Metasploit and threat activity.
UEBA in InsightIDR
User and Entity Behavior Analytics out of the box. It finds unusual user behavior and compromised accounts.
Live Monitoring
InsightVM gets data from agents in real time, with no need for a full rescan.
Pre-built SOAR
300+ ready-made plugins and hundreds of playbooks that automate response, such as containing phishing or isolating a host.
Compliance auditing
Ready-made templates for PCI DSS, HIPAA, CIS, NIST and ISO 27001, with automatic report generation.
Metasploit Validation
The Metasploit integration confirms which vulnerabilities can actually be exploited, using controlled tests.
CNAPP
InsightCloudSec covers cloud security in one platform: CSPM, CIEM, IaC and Kubernetes protection.
MDR 24/7
Managed Detection & Response from Rapid7: extend your SOC with the vendor’s analysts 24/7.
Who uses Rapid7 and how.
Mid-market SOC
A ready-made SIEM+SOAR+VM platform for teams with limited resources. Fast onboarding and preconfigured rules.
Financial sector
PCI DSS scanning with InsightVM, UEBA for fraud detection and logging to meet regulatory requirements.
DevSecOps
InsightAppSec for DAST, InsightCloudSec for IaC, integration with CI/CD pipelines. Security checks move earlier in development (shift-left).
Public sector
Scanning of government systems, on-prem Nexpose for closed segments and compliance reports for regulators.
Pen-testing teams
Metasploit Pro is the industry standard. Used with InsightVM, it validates risks with real exploits.
MDR partnership
Rapid7 MDR extends your SOC with the vendor’s analysts 24/7. A good fit if you don’t have the resources for your own SOC.
Insight Cloud, hybrid or on-prem.
Rapid7 supports cloud, on-premises and managed-service deployment.
Insight Cloud Platform
Rapid7’s cloud platform with all Insight modules. Automatic updates, ready-made rules and playbooks.
- Fast deployment
- All Insight modules
- Pre-built playbooks
Nexpose / Metasploit
An on-prem vulnerability scanner and Metasploit for regulated environments and closed network segments.
- Data inside the perimeter
- Air-gapped segments
- On-site pen-testing
Rapid7 MDR
Managed Detection & Response from Rapid7. The vendor’s analysts watch incidents on InsightIDR around the clock.
- SOC 24/7
- Threat-hunting Rapid7
- Incident response included
300+ ready-made plugins.
InsightConnect contains hundreds of preconfigured connectors and playbooks for integrations.
Which module to choose.
CYBER BOOST will help you choose the right Insight Platform modules.
| Capability | InsightVM | InsightIDR | InsightCloudSec | InsightConnect |
|---|---|---|---|---|
| Vulnerability scanning | ✓ | - | CSPM | - |
| SIEM with UEBA | - | ✓ | - | - |
| CNAPP for AWS/Azure/GCP | - | - | ✓ | - |
| SOAR automation | - | Basic | - | ✓ |
| Threat intelligence out of the box | ✓ | ✓ | ✓ | - |
| Compliance reporting | ✓ | ✓ | ✓ | Via playbooks |
| Real Risk Score | ✓ | - | - | - |
| Metasploit validation | ✓ | - | - | - |
| Who it’s for | VM teams | SOC | Cloud teams | SOAR engineers |
Frequently asked questions
How is Rapid7 different from Tenable?
What is Metasploit and who needs it?
Can we use only Nexpose, without the cloud?
What does Rapid7 MDR include?
Request a Rapid7 demo
We reply within one business day.