Rapid7 Insight AppSec

Rapid7 Insight AppSec performs black-box security testing to identify vulnerabilities, triage vulnerabilities, prioritize actions, and remediate application risk.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Vulnerabilities
• SaaS Applications

Parameters

1. Host Name or IP Address (required) - This is the URL of the Rapid7 Insight AppSec server. The format of the URL contains the region your Rapid7 Insight instance is hosted, followed by the Rapid7 Insight domain. Lastly, a suffix containing the product abbreviation and API version is required to fetch data. For an example, where the Rapid7 Insight instance is hosted in the US-1 region, the URL would be https://us.api.insight.rapid7.com/ias/v1. More information about the Rapid7 Supported Regions is available here: https://docs.rapid7.com/insight/product-apis/#supported-regions

2. API Key (required) - An API Key associated with a user account that has permissions to fetch assets. For information about how to create an API Key, see Managing Platform API Keys.

3. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

4. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

5. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

6. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

APIs

Axonius uses the InsightAppSec API (v1).

Supported From Version

Supported from Axonius version 6.1