Vendors / Rapid7

<Exposure management, SIEM and MDR>

Rapid7

Attack surface management, exposure management, vulnerability management, cyber GRC and next-gen SIEM. With a 24/7 SOC through Rapid7 MDR, also for Microsoft Defender.

Why we work with Rapid7

Technology is only valuable when it gives insight in context. Rapid7 helps answer questions such as: how vulnerable are we today? Are attacks really being detected? How well do our measures work, and can we prove it?

Rapid7 brings the attack surface, vulnerabilities, compliance and detection together on one platform, the Command Platform. That way, larger organisations make decisions based on facts.

The five pillars

We do not think in individual products, but in what you want to achieve. Rapid7 covers five pillars.

  1. Attack surface management: see your organisation the way an attacker sees it. All systems in view, including the forgotten ones, and where security is missing.
  2. Exposure management: vulnerabilities, attack surface, cloud and applications in one risk picture. So you know what to fix first.
  3. Vulnerability management: find vulnerabilities, prioritise them by risk and demonstrably fix them.
  4. Cyber GRC: governance, risk and compliance linked to your real security data. For NIS2, ISO 27001 and the auditor.
  5. Next-gen SIEM: logs and signals in one place, with AI-driven detection.

Monitored day and night: MDR

A SIEM is only as good as the team that watches it. With Rapid7 MDR, a 24/7 SOC monitors your environment, investigates suspicious activity and takes action.

Do you mainly work with Microsoft 365 and Defender? Then MDR for Microsoft is the focused option: the Rapid7 SOC monitors your Defender environment, without you needing Microsoft Sentinel.

In both cases we remain your fixed point of contact, for coordination and advice.

Why this matters for large organisations

Multiple IT partners, complex infrastructures and a wide range of measures: Rapid7 brings it all together in one overview. Security teams, executives and auditors steer on figures instead of gut feeling.

Whether it is a baseline assessment, a SIEM implementation or continuous monitoring: we help you gain insight and make measures measurable. A good start is the Rapid7 90-Minute Health Check.

<frequently asked questions>

About Rapid7

Is your question not listed? Call us on +31 72 202 97 95.

Is Rapid7 only for large organisations?

Rapid7 is mainly suited to larger and complex environments, with multiple locations, cloud and their own IT teams. For SMEs we usually use Guardz, within Cyber Resilience.

What is the difference between exposure management, SIEM and MDR?

Exposure management shows where you are vulnerable and what to fix first: prevention. A SIEM collects signals and spots attacks: detection. MDR is the Rapid7 team that watches those signals day and night and takes action: response.

Which Rapid7 products belong to which pillar?

Attack surface management runs on Surface Command. Exposure and vulnerability management run on Exposure Command and InsightVM, with Active Patching to fix issues automatically. The next-gen SIEM is Incident Command. Cyber GRC is a separate product on the same platform.

We use Microsoft Defender. Does Rapid7 fit?

Yes. With MDR for Microsoft, the Rapid7 24/7 SOC monitors your Defender environment. You do not need Microsoft Sentinel for this.

We already use InsightVM or InsightIDR. What now?

InsightVM has become part of Exposure Command, and InsightIDR is now called Incident Command. We are happy to look at what that means for your environment, and whether you can get more out of your current setup.

Can we start small?

Yes. For example with a baseline assessment or the Rapid7 90-Minute Health Check. Then we decide together whether and how you want to continue.

Which requirements does Rapid7 meet?

Brandaris only works with vendors that hold at least a SOC 2 Type 2 certification. That way you know the security at the vendor itself has also been independently audited.

Does Rapid7 suit your organisation?

We first look at what is already there. If it fits, we help with implementation, adoption and training.

<newsletter>

Our newsletter

Cybersecurity is not just technology. It is people work. In our newsletter we share knowledge, stories and experiences that show how we help organisations move forward. The newsletter is in Dutch.