Rapid7 enhances platform with AI-driven threat detection

Rapid7 has announced updates to its Exposure Management offering, enhancing its Command Platform with new features designed to improve threat detection and remediation for security teams.

The improvements aim to provide organisations with increased visibility into sensitive data across multi-cloud environments and offer AI-driven risk scoring to help prioritise threats more effectively. With enhanced capabilities, security teams can address vulnerabilities faster, with integrated context regarding asset conditions and threat severity.

The updates include continuous multi-cloud visibility and context, which allow organisations to monitor sensitive data and adjust protection strategies accordingly. Craig Adams, Chief Product Officer at Rapid7, commented, "Security teams today need more than just visibility—they need it paired with unparalleled context and control for maximum efficiency. That's exactly what we're delivering with these latest innovations. By integrating sensitive data insights, AI-driven prioritisation, and embedded remediation guidance, we're ensuring that organisations can proactively reduce risk, expedite response times, and gain deeper visibility into their attack surface."

The enhancements focus on discovering and protecting sensitive data by integrating with Cloud Service Provider (CSP) security services such as AWS Macie, GCP DLP, and Microsoft Defender. These tools work alongside Infrastructure-as-Code (IaC) tagging to classify and secure sensitive data, aiming to remove the need for manual processes and improve data hygiene. This integration feeds critical insights into Layered Context and Attack Path Analysis, enabling the prioritisation of exposures that threaten sensitive information.

To keep pace with the rapidly growing number of vulnerabilities, Rapid7 introduces AI-generated vulnerability scoring. The system uses machine learning to analyse vulnerability data, creating intelligence-driven scores that bolster the existing Active Risk scoring system. This enhancement aims to address the lag in timely CVSS scores from vendors like NIST and NVD, providing a more immediate assessment of threat severity for security teams.

The Rapid7 enhancements also extend to the Remediation Hub, designed to streamline risk mitigation processes. The integration of remediation guidance directly within asset inventory and detail pages reduces the need for platform navigation, a change that is intended to speed up the mean-time-to-remediate (MTTR). Additionally, the enriched asset context provides insights from third-party security and IT operations, aiding stakeholders in making informed decisions more rapidly.

Overall, the latest updates aim to empower security teams to track data across various aspects, including locations, ownership, access controls, and posture statuses. With the integration of risk-based exposure management, teams can align risk severity, asset context, and exploitability with recommended remediations, thus enhancing the effectiveness of their cybersecurity measures.