Attackers don't wait for your schedule, in fact, they try and take advantage of your ‘windows of wait' when you're biding your time waiting for a scan. Just think of your typical Patch Tuesday, when you walk in on Wednesday your vulnerability management solution has all the checks, but then you wait for that next scan. You wait for data to be recollected, assessed, and then hopefully served up in a way that is intuitive and describes exactly what you need to do, and when. At that point the work begins to actually get the remediation done, and thirteen days later you've finally got it all patched up.
Much of this is a result of technology simply not keeping up with our needs as security pros, as my colleague Matt discussed, but it's also about combining the right technologies to deliver the right information at the right time. When you have the ability to see fresh data, analyze it easily, serve it up live with detailed priorities, and then manage the remediation with intuitive workflows, you're no longer passively waiting. You're acting at the moment of impact.
Introducing Nexpose Now
With all that build up above, NOW it's time to deliver. Today, we announced a major evolution in Nexpose vulnerability management, called Nexpose Now. Users will have the power of threat exposure analytics and live dashboards (generally available today), remediation workflow (Beta as of today) and live monitoring via Rapid7 Insight Agents (Limited Availability today). The combination of these capabilities means the end of passively waiting for the next scan or sifting through all those false alerts. Instead, you will immediately see exactly what needs to be done, how to do it, and manage that progress all the way until it's done.
Let's take a look at what Nexpose Enterprise and Ultimate users will soon be able to do:
Easily see the health of your security program with Liveboards and Threat Exposure
Analytics (Available Now):
New dashboards provide a live scoreboard of where you're winning and losing in your security program. Unlike most dashboards, which are in reality simply static reports of old data, Nexpose's Liveboards update instantly when you get new information, and make it easy to dig into granular data with a few clicks – no need for a degree in querying languages or data analytics.
Make IT your best friend with Remediation Workflow (Beta): We all know that finding vulnerabilities is only one side of the coin. The key is how fast you can remove those vulns to reduce risk. Our Remediation Workflow will convert vulnerability data into action and hand deliver prioritized tasks and context directly to IT including what needs to be fixed, by when, and why, and you can then watch the progress to ensure the job gets done.
Monitor it all live with Adaptive Security or Rapid7 Agents (Limited Availability): As you all know, Adaptive Security has become an important capability, helping you to see exposures as they are introduced into your environment. The Rapid7 Agents, introduced in early 2016 with our InsightIDR product, are now in Nexpose with Limited Availability. When combined with Adaptive Security you will have a truly live monitoring capability that allows you to further avoid the ‘scan and wait' trap. We are really looking forward to helping our customers realize this powerful capability.
These new capabilities are opt-in, cloud based features in Nexpose Enterprise and Nexpose Ultimate. Because this is a significant advancement, we've created a lot of resources for you to get more information, just head to our Nexpose Now overview page for the very latest.
We believe that the best advancements are made together, and we certainly owe a big THANK YOU to all of the amazing customers that not only participated in our Beta program for Threat Exposure Analytics and Liveboards, but also have talked with us about your need for each of these capabilities. Today we witness the outcome of our combined partnership and further inspired innovation. If interested in participating in the Beta programs for these upcoming releases and more, please reach out to your CSM or sales representative!
NOTE: Rapid7 creates innovative and progressive solutions that help our customers confidently get their jobs done. As such, the development, release, and timing of any product features or functionality described remains at our discretion in order to ensure our customers the excellent experience they deserve and is not a commitment, promise or legal obligation to deliver any functionality.