IT Latest News

Rapid7 Unveils Two Innovative Solutions to Deliver Visibility, Insight and Progress Trending for Information Security Professionals

AUGUST 20, 2013

Rapid7 ControlsInsight and Rapid7 UserInsight Demonstrate Unique Analytics and Management Capabilities for Security Controls and User Risk

Boston, MA – August 20, 2013 - Rapid7 showcased two new IT security insight solutions today at UNITED 2013, Rapid7's security summit. Lee Weiner, senior vice president of products and engineering at Rapid7, highlighted both the vision and benefits of Rapid7 ControlsInsight and Rapid7 UserInsight.

"Our ambition is to make it easy for defenders to get insight into their increasingly complex environment, so they can act effectively to manage and reduce security risk. We call this 'insight driving action,'" explained Lee. "It's difficult for security professionals to sift through the noise that's bombarding them and identify relevant threats so they can communicate the current state of their organization's security. It's even harder to gauge what's working and what's not, and where further investment or action is needed. We aim to give them this insight, and help them achieve progress in reducing risk."

ControlsInsight and UserInsight focus on two core areas: the effectiveness of security controls in place, and the risk associated with the users across an organization. This is a logical advancement of Rapid7's risk analytics and management portfolio, which includes leading vulnerability management software, Nexpose, the world's most popular penetration testing tool, Metasploit, and mobile risk management solution, Mobilisafe. Built on Rapid7's fast, comprehensive data collection and contextual threat awareness, these solutions provide unmatched visibility for risk management across assets, users, networks, and services whether on-premise, mobile, or cloud-based.

Rapid7 ControlsInsight

According to industry analyst firm, Gartner, worldwide security software revenue totaled $19.2 billion in 20121. The vast majority of this spend is focused on controls to protect assets, data, and users. Many organizations now have thousands, or even tens of thousands, of controls in place to protect themselves, and few have a true gauge of how effectively these controls are deployed, how well they are configured, and how well they protect against the real and current threats the organization faces.

Rapid7 ControlsInsight addresses this by providing visibility into these security controls. With the first version of ControlsInsight, security professionals and business leaders can see how well their endpoint security controls are performing, whether the right investments are being made and fully utilized, and where further investment is needed. Users can also track progress in reducing risk over time. These capabilities are based on a unique threat model that is built on Rapid7's deep understanding of the threat landscape, combined with risk management best practices from the Company's broad customer base.

Future editions of ControlsInsight will focus on the controls deployed for other areas of an organization's information security program.

"Corporate endpoints remain one of our largest security concerns and are the source of many of today's security breaches," said Chad Currier, IT infrastructure director, Cardinal Innovations Healthcare Solutions. "Not knowing the state of our endpoints is a risk that our organization cannot afford to take. Rapid7 ControlsInsight has provided our organization with visibility and insight that we cannot get anywhere else. It makes managing our endpoints easier, and that is appreciated by those of us with smaller security teams."

ControlsInsight is available immediately. For information on pricing, please contact This email address is being protected from spambots. You need JavaScript enabled to view it.. For a free trial, please

Rapid7 UserInsight

Evolving IT usage models, such as the adoption of employee-owned smart phones and proliferation of cloud services, have resulted in an organization’s employees representing considerable risk. For example, according to the 2013 Verizon Data Breach report, 76% of network intrusions reported in 2012 exploited weak or stolen credentials2.

Whether it is a user having their credentials compromised, unintentionally opening a malicious attachment, clicking on a dangerous link, losing a smart phone connected to the corporate network, or using an insecure cloud service without the knowledge of the IT team, security professionals need to be aware of the risks associated with end-users in their organizations. Protecting the organization by securing the perimeter has become considerably more complex as every user is now a point on the perimeter. IT professionals must now consider how they protect assets that they don’t directly manage, such as mobile devices and cloud services.

Rapid7 UserInsight uniquely addresses this need by monitoring user activity across on-premise, cloud, and mobile environments to provide comprehensive visibility, more effective incident response, and detection of compromised credentials. Through native integration, security teams can see beyond the corporate network to activity with key cloud services, such as SalesForce and Box. Access to these cloud-based business services from personal devices is monitored as effectively as access from within the firewall. With comprehensive insight into user activity, security professionals can greatly reduce the time required to identify compromised users and investigate risks to the network.

"Monitoring user activity across on-premise, cloud and mobile environments helps to secure our environment today and into the future," said Robert Jones, information security manager, City of Corpus Christi. "We've been involved with Rapid7 UserInsight since the beginning and were able to use the beta version of the product to detect new things in our network."

UserInsight will be available later in 2013. For information on pricing, please contact This email address is being protected from spambots. You need JavaScript enabled to view it.. For more information, please

About Rapid7

Rapid7's IT security solutions deliver visibility and insight that help you make informed decisions, create credible action plans, and monitor progress. They simplify compliance and risk management by uniquely combining contextual threat analysis with fast, comprehensive data collection across your users, assets, services and networks, whether on premise, mobile or cloud-based. Rapid7's simple and innovative solutions are used by more than 2,500 enterprises and government agencies in more than 65 countries, while the Company's free products are downloaded more than one million times per year and enhanced by more than 200,000 members of its open source security community. Rapid7 has been recognized as one of the fastest growing security companies by Inc. Magazine and as a "Top Place to Work" by the Boston Globe. Its products are top rated by Gartner®, Forrester® and SC Magazine. For more information about Rapid7, please visit

New offering addresses need to protect users’ mobile and cloud 

interactions in the New Style of IT 

WASHINGTON, Sept. 17, 2013

HP today unveiled its new family of HP TippingPoint 

Next-Generation Firewall (NGFW) appliances to further protect customers from threats introduced by mobile and cloud computing. 

Bringing to market five new models, HP is extending its network security portfolio to help organizations disrupt the adversary before the network is infiltrated.

Read more: HP Extends Network Threat Protection with NextGeneration Firewall

IRVINE, CA - March 22, 2013 - XRoads Networks innovative product line now includes unique solutions for the financial services industry in order to improve bandwidth continuity for financial firms. The various capabilities of the EdgeXOS platform enable automated network reliability and redundancy, i.e. the ability to instantly failover between WAN links to maintain network connectivity between remote offices and the data center.

Read more: XRoads Networks Implements Automated Network Redundancy for Financial Services Firm

Sponsor: HP TippingPoint Division
Featured Analyst Firm: Gartner
Speakers: John Pescatore, Sanjay Raja
Type: Video (21 minutes)

As advanced persistent and targeted threats continue to breach today's enterprises, business and IT processes need to fundamentally evolve to deal with these new risks, and to stay ahead of these new threats, network security managers must increasingly look for next-generation network IPS capabilities.

Read more: Modern Threats and the Need for Next Generation Intrusion Prevention


Follow us on Facebook

SFbBox by afl odds
You are here: Home News