Delivering visibility, insight and progress trending for security professionals

“Our ambition is to make it easy for defenders to get insight into their increasingly complex environment, so they can act effectively to manage and reduce security risk. We call this ‘insight driving action,’” explained Lee. “It’s difficult for security professionals to sift through the noise that’s bombarding them and identify relevant threats so they can communicate the current state of their organisation’s security. It’s even harder to gauge what’s working and what’s not, and where further investment or action is needed. We aim to give them this insight, and help them achieve progress in reducing risk.”

ControlsInsight and UserInsight focus on two core areas: the effectiveness of security controls in place, and the risk associated with the users across an organisation. This is a logical advancement of Rapid7’s risk analytics and management portfolio, which includes leading vulnerability management software, Nexpose, the world’s most popular penetration testing tool, Metasploit, and mobile risk management solution, Mobilisafe. Built on Rapid7’s fast, comprehensive data collection and contextual threat awareness, these solutions provide unmatched visibility for risk management across assets, users, networks, and services whether on-premise, mobile, or cloud-based.

Rapid7 ControlsInsight

According to industry analyst firm, Gartner, worldwide security software revenue totaled $19.2 billion in 2012
. The vast majority of this spend is focused on controls to protect assets, data, and users. Many organisations now have thousands, or even tens of thousands, of controls in place to protect themselves, and few have a true gauge of how effectively these controls are deployed, how well they are configured, and how well they protect against the real and current threats the organisation faces.

Rapid7 ControlsInsight addresses this by providing visibility into these security controls. With the first version of ControlsInsight, security professionals and business leaders can see how well their endpoint security controls are performing, whether the right investments are being made and fully utilised, and where further investment is needed. Users can also track progress in reducing risk over time. These capabilities are based on a unique threat model that is built on Rapid7’s deep understanding of the threat landscape, combined with risk management best practices from the Company’s broad customer base.

Future editions of ControlsInsight will focus on the controls deployed for other areas of an organisation’s information security program.

"Corporate endpoints remain one of our largest security concerns and are the source of many of today's security breaches,” said Chad Currier, IT infrastructure director, Cardinal Innovations Healthcare Solutions. “Not knowing the state of our endpoints is a risk that our organisation cannot afford to take. Rapid7 ControlsInsight has provided our organisation with visibility and insight that we cannot get anywhere else. It makes managing our endpoints easier, and that is appreciated by those of us with smaller security teams."

ControlsInsight is available immediately. For information on pricing, please contact info@rapid7.com. For a free trial, please visit www.rapid7.com/products/controls-insight.

Rapid7 UserInsight

Evolving IT usage models, such as the adoption of employee-owned smart phones and proliferation of cloud services, have resulted in an organisation’s employees representing considerable risk. For example, according to the 2013 Verizon Data Breach report, 76% of network intrusions reported in 2012 exploited weak or stolen credentials.

Whether it is a user having their credentials compromised, unintentionally opening a malicious attachment, clicking on a dangerous link, losing a smart phone connected to the corporate network, or using an insecure cloud service without the knowledge of the IT team, security professionals need to be aware of the risks associated with end-users in their organisations. Protecting the organisation by securing the perimeter has become considerably more complex as every user is now a point on the perimeter. IT professionals must now consider how they protect assets that they don’t directly manage, such as mobile devices and cloud services.

Rapid7 UserInsight uniquely addresses this need by monitoring user activity across on-premise, cloud, and mobile environments to provide comprehensive visibility, more effective incident response, and detection of compromised credentials. Through native integration, security teams can see beyond the corporate network to activity with key cloud services, such as SalesForce and Box. Access to these cloud-based business services from personal devices is monitored as effectively as access from within the firewall. With comprehensive insight into user activity, security professionals can greatly reduce the time required to identify compromised users and investigate risks to the network.