Skip to main content

Rapid7 Insight

The Rapid7 Insight Platform is a cloud-based security solution offering integrated tools for vulnerability management, incident detection, and application security, enhanced by advanced analytics and automation for efficient threat identification and response.

Installation

Configuration in Rapid7 Insight Platform

  1. Go to the Rapid7 Insight Platform.
  2. Click in the gear icon at the top right corner and when the dropdown is opened click on API Keys.
  3. Inside API Key Management -> Organization Keys, click Generate New Organization Key. Select your Organization and create a name for your API key.
  4. The created API key will be addded to the JupiterOne integration instance configuration. Your API key will be displayed only one time so make sure to copy it before closing the creation modal.

Configuration in JupiterOne

To install the Rapid7 Insight integration in JupiterOne, navigate to the Integrations tab in JupiterOne and select Rapid7 Insight. Click New Instance to begin configuring your integration.

Creating a configuration requires the following:

  • API Key: the created API key should be added here.

  • InsightVM Region: the region to ingest InsightVM data from. Use us as default value.

  • Insight AppSec Region: the region to ingest InsightVM data from. Use us2 as default value.

  • Product Codes to Ingest: Here we will add the Insight product codes to ingest. Use IVM for InsightVM and AS for AppSec. If you want to ingest both of them please add them comma separated (for example AS,IVM). IVM is still under develpment. This code will be enabled soon.

  • The Account Name used to identify the Rapid7 Insight account in JupiterOne. Ingested entities will have this value stored in tag.AccountName when the AccountName toggle is enabled.

  • Description to assist in identifying the integration instance, if desired.

  • Data Source Settigns: here you will be able to customize the steps to be ingested. If desired, specific steps can be enabled/disabled from here.

  • Polling Interval that you feel is sufficient for your monitoring needs. You may leave this as DISABLED and manually execute the integration.

Click Create once all values are provided to finalize the integration.

Next steps

Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.