insightVM

Features

Live vulnerability and endpoint analytics to remediate faster

Threat Exposure Analytics

The Rapid7 Insight platform, launched in 2015, brings together Rapid7’s library of Nexpose vulnerability research, Metasploit exploit knowledge, global attacker behavior, Internet-wide scanning data, and threat exposure analytics. InsightVM takes advantage of this powerful analytics platform to automatically collect, monitor, and analyze your network for new and existing risk, and provide your IT and Security teams with the right answers to do their jobs more efficiently.

Continuous Endpoint Monitoring

Rapid7 Insight Agents automatically collect data from all your endpoints, even those remote workers and sensitive assets that cannot be actively scanned. Combined with Adaptive Security, which automatically detects and assesses new devices and vulnerabilities the moment they access your network, and dynamic monitoring of VMware, AWS, and Azure, InsightVM provides continuous live monitoring for your changing environment.

 

Liveboards Are Better Than Dashboards

Most dashboards are static: a snapshot of your risk at a particular time, unclickable and instantly out of date. InsightVM Liveboards are always live and interactive. You can easily create custom cards and full dashboards for anyone, from CISO to sysadmin, and each card can be queried with simple language to investigate your security program’s progress.

 

Remediation Workflow

Get from find to fix, faster! With InsightVM Remediation Workflows, security teams can assign and track remediation duties in real time, providing continuous visibility into how well issues are being fixed. Ticket assignment occurs automatically, with targeted and precise security data included on each ticket, allowing security and IT teams to be more focused and productive.

 

Real Risk Score

The standard 1-10 CVSS score results in thousands of “critical” vulnerabilities. Our vulnerability scanner's Real Risk Score provides more actionable information. Taking into account vulnerability age, as well as public exploits/malware kits, our 1-1000 scale highlights the vulnerabilities most likely to be used in an attack, helping you prioritize truly critical issues. When used with our robust tagging system, you can even prioritize the systems most critical to your business, automatically.

 

Integration with Metasploit

The goal of any security product is to shore up your defenses in the event of an actual attack—what better way to test them than by simulating one? With Metasploit Pro, you can validate your vulnerability scanner results using an automated, closed loop process, ensuring you automatically prioritize the most important assets first: the ones that are easiest to breach.

 

Integration with InsightIDR

Because InsightVM is part of Rapid7’s Insight platform it can also feed data directly into InsightIDR, our award-winning incident detection and response (IDR) solution. InsightIDR combines the capabilities of SIEM, EDR, and UBA to get more out of your existing security and network investments and expand monitoring to include endpoints, logs, and cloud services. In other words, we leave attackers with nowhere to hide.

 

Try our vulnerability scanner for free

Get Started