3 min
InsightIDR
What’s New in InsightIDR: Q1 2021 in Review
Back at the start of the year, we reflected on some of our 2020 InsightIDR product investments and took a look at what was ahead in 2021. As the first quarter of the year comes to a close, we wanted to offer a closer look at some of the recent updates and releases in InsightIDR.
Read Full Post
3 min
Alcide
Kubernetes Namespaces Are Not as Secure as You Think
A common misconception around namespaces is that they are truly separated. However, it is more likely to think of it as a police tape—you know it is there, but it is fairly easy to bypass it.
Read Full Post
5 min
Cloud Security
Looking Back and Moving Forward With Rapid7’s Cloud Security Solution
The DivvyCloud by Rapid7 team has had a busy and productive start to 2021, and we anticipate that the rest of this year will be equally exciting for our valued customers.
Read Full Post
3 min
Cloud Security
DivvyCloud Adds Support for IAM Analyzer Policy Recommendations
Rapid7 built out support for the IAM Access Analyzer policy recommendations to DivvyCloud within 48 hours of AWS’s announcement.
Read Full Post
3 min
Cloud Security
What's New in DivvyCloud by Rapid7: February 2021 Feature Releases
February was another busy month for DivvyCloud by Rapid7. Here is a round-up of the releases we made throughout the month.
Read Full Post
3 min
Cloud Security
How to Keep Up With Vulnerability Management Challenges in Ephemeral Cloud Environments
The modern perspective is that the cloud has made it much easier to have visibility of your attack surface and everything you’re working with.
Read Full Post
4 min
Cloud Security
IAM Never Gonna Give You Up, Never Gonna Breach Your Cloud
Identity and access management (IAM) credentials have solved myriad security issues, but the recent cloud-based IAM movement has left many scratching their heads as to why it can be so complex.
Read Full Post
3 min
Cloud Security
How to Achieve and Maintain Continuous Cloud Compliance
Complicated cloud compliance is weighing on many organizations as off-premises security quickly becomes more of the norm.
Read Full Post
2 min
Cloud Infrastructure
Why More Teams are Shifting Security Analytics to the Cloud This Year
As the threat landscape continues to evolve in size and complexity, so does the security skills and resource gap, leaving organizations both understaffed and overwhelmed.
Read Full Post
2 min
Rapid7 Perspective
Rapid7 Acquires Leading Kubernetes Security Provider, Alcide
We at Rapid7 are happy to announce that we have acquired Alcide, a leader in Kubernetes security based in Tel Aviv, Israel.
Read Full Post
1 min
DivvyCloud
A Quick Look Into Cloud Infrastructure Entitlement Management (CIEM)
In its 2020 Cloud Security Hype Cycle, Gartner included a new category and corresponding “C” acronym, “CIEM.” This new archetype describes solutions focused on cloud identity & access management (IAM), which is often too complex & dynamic to be managed effectively by native CSP tools alone.
Read Full Post
2 min
DivvyCloud
A Quick Look Into Cloud Workload Protection Platforms (CWPPs)
According to Gartner, CWPPs are workload-centric security offerings that target the unique protection requirements of workloads in modern hybrid, multi-cloud data center architectures.
Read Full Post
2 min
DivvyCloud
A Quick Look Into Cloud Security Posture Management (CSPM)
The cloud security solutions market is growing rapidly, and there are many types of solutions to support your specific business needs. But figuring out the right tool—let alone the right type of tool—can be difficult.
Read Full Post
3 min
DivvyCloud
DivvyCloud by Rapid7: Feature Release 20.7
This well-rounded release includes a new Microsoft Azure Security Pack, expanded support for Azure resources, added AWS support, and several enhancements applicable to all clouds.
Read Full Post
6 min
Cloud Security
A Holistic Approach to Kubernetes Security and Compliance
Taking a holistic approach to security and risk is essential for any organization that uses Kubernetes or another cloud-based container platform.
Read Full Post
3 min
Cloud Security
Don’t Let These Top Cloud Myths Hamper Your Business Decision-Making
Use these insights to help make the right decisions on cloud adoption for your organization.
Read Full Post
2 min
Cloud Security
Heartland Dental’s Ambitions Land Them in the Cloud
We sat down with Heartland Dental to talk about why they chose Rapid7, how quickly they’re expanding, and why it’s time to shift services to the cloud.
Read Full Post
9 min
Cloud Security
Augmenting Native Cloud Service Provider Security
Most organizations already have some level of cloud infrastructure services; infrastructure-as-a-service , platform-as-a-service, function-as-a-service or serverless—and as more workloads migrate to and are built on the cloud, the top cloud security concern for any organization is a data breach.
Read Full Post
8 min
Cloud Security
Cloud Best Practices Every Security Professional Should Know
In part one of this series on the cloud and cloud security for security professionals, we dove into everything you’ve ever wanted to know about the cloud.
Read Full Post
3 min
DivvyCloud
The Net Effect: Why Cloud IAM Is So Difficult
Managing identity and access management (IAM) in the cloud is a complex problem—far more complex than it is in traditional, on-premises IT environments guarded by an explicit firewall.
Read Full Post
4 min
Remote Working
Back to Basics: Maintaining Cloud Migration Oversight While Navigating the New Normal
On the final installment of our Remote Work Readiness Series, Rapid7 taps industry insiders for what the future of security leadership might look like.
Read Full Post
7 min
Cloud Security
The Security Practitioner's Intro to the Cloud: Everything You Ever Wanted to Know But Were Afraid to Ask
In this post, we provide an introductory primer to the cloud and cloud security for security professionals who want to fill in the blanks.
Read Full Post
2 min
Cloud Security
DivvyCloud by Rapid7 Announces New Infrastructure as Code Security Capability
DivvyCloud by Rapid7, the leading cloud security platform, today released a new core capability, Infrastructure as Code (IaC) Security. This capability integrates cloud security into the DevOps process, improving developer productivity and preventing cloud security issues during the build process.
Read Full Post
2 min
Rapid7 Announces Intent to Acquire DivvyCloud
We are thrilled to announce that today we have entered into a definitive agreement to acquire DivvyCloud.
Read Full Post
5 min
Events
How We Used Data Science Magic to Predict Key RSA 2020 Themes and Takeaways
As our team discussed our traditional RSA round-up blog, we started to wonder how easy it would be to predict those key themes before the conference even kicked off.
Read Full Post
4 min
Cloud Security
How to Handle Misconfigurations in the Cloud
In part three of our four-part series on security in the cloud, we will cover how to handle misconfigurations in the cloud.
Read Full Post
2 min
DivvyCloud
Security Isn’t a Four-Letter Word: How Infrastructure as Code (IaC) Amplifies DevOps Through the Inclusion of Security
Our fast-paced lives are fueled by innovative, cloud-native companies. We are able to watch our favorite programs and movies from anywhere in the world on any device. We are able to collaborate with our colleagues on an upcoming presentation, regardless of whether we’re in the office or at home.
Read Full Post
3 min
Cloud Security
Seven Tips for Better Cloud Security in 2020
In this blog post, we will highlight seven tips for shoring up your cloud security in the new year.
Read Full Post
2 min
DivvyCloud
What Is Cloud Security Posture Management (CSPM)?
As the cloud grows, so too does the playing field of participants. Between infrastructure management (IaaS, PaaS, fPaaS, SaaS, Raas) security, CI/CD, and trying to navigate all of the nuances in between, it’s difficult to keep track of what each category of tooling includes.
Read Full Post
3 min
Cloud Security
Deploying Kubernetes Across Multiple Clouds
Kubernetes is essentially a container orchestration platform. It is not a container runtime (software that executes containers and manages container images on a node), meaning it doesn’t replace Docker.
Read Full Post