2007 Press Releases

Rapid7’s Latest NeXpose Release Provides Enterprise-Level Support Capabilities, Delivering Increased Performance and Reliability

The NeXpose Enterprise Edition Supports Oracle Environments with Large-Scale Scanning, High Performance Throughput and Ease of Maintenance Based on IT Best Practices

Boston - January 17, 2006 - With the latest release of its award-winning vulnerability management solution, Rapid7 introduces the NeXpose Enterprise Edition, which offers comprehensive, enterprise-level scanning and data storage via support for Oracle environments, dramatically increasing performance and reliability. NeXpose 4.5 allows organizations to leverage the advantages of their Oracle infrastructure, such as the enterprise database, server clustering, and functionality.

By employing Oracle, the NeXpose 4.5 Enterprise Edition enables storage of large amounts of vulnerability data in a standardized format that is easily accessible for reporting. NeXpose 4.5 ensures that data becomes part of the overall infrastructure, making it highly secure. The system also facilitates cluster back-ups by database while still online. NeXpose utilizes both Oracle and PostgreSQL databases.

"With version 4.5, NeXpose is a fully enterprise-ready product that allows organizations to leverage their investment in their Oracle infrastructure," states Alan Matthews, president of Rapid7 LLC. "NeXpose 4.5 allows customers to take advantage of their Oracle server cluster to utilize greater quantities of enterprise network data and ensure that data is secure, backed up and accessible."

In addition to the NeXpose Enterprise Edition, NeXpose 4.5 includes other new features that are part of the general release, such as support for the new Microsoft Windows Vista operating system. NeXpose 4.5 offers greater ease and flexibility with locating and reporting vulnerabilities as a result of more robust filtering, which enables users to more easily manipulate large data sets and quickly locate devices matching various criteria, such as device name or operating system.

NeXpose 4.5 also includes new management features that benefit IT administrators. NeXpose has the ability to start itself in maintenance mode for performing diagnostics or changing configurations. It also automatically determines if any internal problems exist with any configuration, such as a database, and then notifies the administrator so corrections can be made before further problems result.

First introduced in 2001, Rapid7's NeXpose scans Web server applications, databases, operating systems, and network devices to locate threats, assess their risk to the environment, devise a remediation plan and implement the ticketing process. NeXpose incorporates an expert system to build a knowledge base of facts on the environment it is exploring and model potential targeted attacks to expose all existing threats. NeXpose provides reporting capabilities that ensure compliance with governmental regulations and corporate security configuration policies. NeXpose PCI Compliance services meet the security scanning requirements of the MasterCard Site Data Protection (SDP) Program.

Availability and Pricing

NeXpose 4.5 is available in multiple deployment options: Software, plug-and-play Appliance and Hosted Services. Pricing for the general release of NeXpose 4.5 is $12,000 for 64 IP addresses; $25,000 for a Class “C” license (256 IPs) and $98,000 for a Class “B” license (65,000 IPs). The NeXpose 4.5 Enterprise Edition is priced at $235,000 and includes an enterprise license, which supports unlimited IPs.

About Rapid7

Rapid7 is the leading provider of unified vulnerability management, compliance, and penetration testing solutions, delivering actionable intelligence about an organization’s entire IT environment. Rapid7 offers the only integrated threat management solution that enables organizations to implement and maintain best practices and optimize their network security, Web application security and database security strategies.

Recognized as the fastest growing vulnerability management company in the U.S. by Inc. Magazine, Rapid7 helps leading organizations such as Liz Claiborne, Southern Company, the United States Postal Service, the New York Times, Carnegie Mellon University and the National Nuclear Security Administration (NNSA) to mitigate risk and maintain compliance for regulations such as PCI, HIPAA, FISMA, SOX and NERC . Rapid7 also manages the Metasploit Project, the leading open-source penetration testing platform with the world’s largest database of public, tested exploits. For more information, visit www.rapid7.com.