Rapid7

Smart SOAR’s integration with Rapid7 InsightVM feeds vulnerability scans into automation-powered response workflows. When InsightVM runs a scan across endpoints and detects a vulnerability, Smart SOAR reads and parses the scan report and generates an incident response playbook. Smart SOAR determines the endpoint on which the vulnerability was found and enriches the report with contextual information, including MITRE ATT&CK TTP correlation. The user can notify the necessary teams from Smart SOAR or generate an IT ticket to schedule a patch or update. If the organization has existing scripts for patch management, Smart SOAR can trigger those directly.

By combining Rapid7 IDR for cloud-based threat detection with Smart SOAR for incident enrichment and response, you can easily escalate genuine threats to incident status in Smart SOAR. With data enrichment and orchestration across your entire security stack, you can efficiently respond to real threats. Incident response teams can manage breaches from end-to-end using the Rapid7 IDR and D3 Smart SOAR integration.