Rapid7’s AI Engine Supercharges Security Operations with Generative AI

Rhea-AI Summary

Rapid7 (NASDAQ: RPD) has upgraded its AI Engine with generative AI capabilities, enhancing its Managed Detection and Response (MDR) services. This AI Engine now integrates large language models to improve threat detection, alert triage, and incident response. The new capabilities help Rapid7's security operations center (SOC) quickly identify and mitigate threats, reducing false positives and enabling faster resolution. The SOC assistant, powered by this AI Engine, significantly increases the efficiency of Rapid7 analysts. The AI Engine processes over 4.8 trillion security events weekly, providing actionable insights and accelerating incident reporting. This technological advancement aims to deliver superior security services and maintain Rapid7's position as a leader in AI-driven cybersecurity solutions.

Positive

• Integration of generative AI into Rapid7's AI Engine enhances threat detection and alert triage.
• AI Engine processes over 4.8 trillion security events each week, providing a robust learning environment.
• SOC assistant increases efficiency and speed in threat response for Rapid7 analysts.
• AI-driven automation reduces false positives, allowing analysts to focus on genuine threats.
• The continuous feedback loop ensures accurate and actionable information.
• Improved incident response helps customers quickly understand and mitigate risks.
• Enhanced capabilities provide higher levels of threat efficacy and faster security event resolution.

Negative

• No specific financial data or revenue impact mentioned in the PR.
• Potential risks associated with the implementation of new AI models not addressed.
• No detailed timeline for when customers can expect to see these enhancements in action.

Insights

Tech Expert

The incorporation of new generative AI capabilities into Rapid7's AI Engine represents a significant technological advancement in cybersecurity. Generative AI, which is designed to create new data that resembles the input data, can dramatically improve threat detection and response by simulating potential threat scenarios and identifying patterns that traditional algorithms might miss. This multi-layered approach, combining traditional machine learning with generative AI, enhances the accuracy of identifying malicious threats, thereby reducing false positives. This is important for security operations as it allows analysts to focus on genuine threats, improving efficiency and response times. This positions Rapid7 as a cutting-edge player in the cybersecurity market, leveraging sophisticated AI to deliver superior threat management services.

Financial Analyst

From a financial perspective, the enhancement of Rapid7's AI capabilities could translate into a stronger competitive position and potentially increased market share in the cybersecurity industry. As enterprise clients seek more reliable and efficient threat detection solutions, Rapid7's enhanced MDR services could attract new customers and retain existing ones, driving revenue growth. The company's history of innovation and numerous AI and ML patents reinforce its reputation as a leader in AI-driven cybersecurity. Investors should note that while the integration of generative AI can lead to improved operational efficiency and customer satisfaction, the initial costs of development and integration into existing systems could impact short-term financials. However, the long-term benefits in performance and market positioning could outweigh these costs.

With large language models now incorporated into the Rapid7 AI Engine powering its Managed Detection and Response services, the company’s security operations center accelerates discovery, detection, investigation, response, and reporting for better customer outcomes

BOSTON, June 13, 2024 (GLOBE NEWSWIRE) -- Rapid7, Inc. (NASDAQ: RPD) today announced the Rapid7 AI Engine used by its global security operations center (SOC) teams now includes new generative artificial intelligence (AI) capabilities, transforming the way the company delivers its leading managed detection and response (MDR) services.

The Rapid7 AI Engine is the foundational analytics engine that underpins the Insight Platform and assists the company’s global SOC team throughout the lifecycle of an attack. It enhances threat detection and alert triage by leveraging a massive and diverse set of risk and threat data to automatically distinguish between malicious and benign alerts. The engine includes a combination of traditional machine learning (ML) and generative AI models, providing a multi-layered approach to validate that new security alerts have been accurately labeled as malicious or benign. This allows Rapid7 analysts to spend more time investigating the security signals that matter to customers instead of sifting through false positives.

Building on a rich tradition of innovation, this enhancement to the Rapid7 AI Engine supercharges the company’s elite SOC experts with instantaneous access to relevant and actionable information for the complex security events that are the focus of today's security teams. The Rapid7 AI Engine drives higher levels of threat efficacy with faster security event resolution for customers and partners, all while providing insights into best practices that will elevate Rapid7's SecOps platform.

“For years, we’ve pioneered the application of AI technologies, establishing patented models and incorporating them into our technologies to better and more efficiently solve customer challenges,” said Laura Ellis, vice president, data and AI, Rapid7. “We remain at the forefront with generative AI, enhancing our world-class MDR services, ensuring that we continue to deliver unparalleled results for our customers.”

Rapid7’s AI Engine powers the company’s AI-native SOC assistant so MDR analysts can quickly respond to security threats and proactively mitigate risks on behalf of customers. The SOC assistant utilizes the company’s vast internal knowledge bases to guide analysts through complex investigations and streamline response workflows, keeping SOC analysts a step ahead.

The Rapid7 AI Engine also has the ability to accelerate incident response to enable customers to quickly understand mitigation measures. The Rapid7 AI Engine automates the first draft of incident reports so that SOC analysts can deliver service more quickly, focusing on reviewing and finalizing the report, providing guidance and then moving on to the next most pressing action for the customer.

“Our AI Engine’s SOC assistant is a powerful tool for our expert teams,” said Jeremiah Dewey, senior vice president, managed services and product delivery, Rapid7. "They are now exponentially more effective, due to the increased efficiency and speed in which they can respond to threats and mitigate risks, a significant advantage for our MDR customers and partners.”

Rapid7 operates its AI engine in-house, and the company’s process for deployment includes releasing AI models to its internal SOC teams to be trained and tested before being released to customers via in-product experiences. This creates a continuous feedback loop between the company’s frontline analysts and AI and data science team. This process ensures that Rapid7’s models can be used to get accurate, and actionable information.

Rapid7 possesses an expansive range of event data sources, proprietary security datasets, and emergent threat intelligence that encompass modern environments and attack surfaces. Capturing over 4.8+ trillion security events each week, these datasets and telemetry combine to fuel a powerful learning environment for AI models.

Rapid7’s history of incorporating AI approaches into its technology solutions dates back to the use of expert systems in Nexpose, the company’s very first product launched in 2001. Over the years, it has secured numerous patents for innovations in AI and ML, leading to the establishment of its AI Centre of Excellence. Rapid7 has also expanded its security data collection through product features plus key R&D and open source efforts such as Metasploit and Sonar, as well as Velociraptor for internal data collection.

Rapid7’s AI Engine fuels the company’s MDR service, part of Managed Threat Complete. To learn more about Rapid7’s AI Engine, read the blog here.

About Rapid7
Rapid7, Inc. (NASDAQ: RPD) is on a mission to create a safer digital world by making cybersecurity simpler and more accessible. We empower security professionals to manage a modern attack surface through our best-in-class technology, leading-edge research, and broad, strategic expertise. Rapid7’s comprehensive security solutions help more than 11,000 global customers unite cloud risk management with threat detection and response to reduce attack surfaces and eliminate threats with speed and precision. For more information, visit our website, check out our blog, or follow us on LinkedIn or X.

Media Contact:
Kelly Crummey
Corporate Communications
press@rapid7.com
(617) 921-8089

Investor Contact:
Elizabeth Chwalk
Sr. Director, Investor Relations
investors@rapid7.com
(617) 865-4277

FAQ

What enhancements have been made to Rapid7's AI Engine?

Rapid7's AI Engine now includes generative AI capabilities, improving threat detection, alert triage, and incident response.

How does Rapid7's AI Engine improve Managed Detection and Response (MDR) services?

The AI Engine processes large volumes of security events, reduces false positives, and enables faster and more accurate threat resolution, enhancing MDR services.

What is the role of generative AI in Rapid7's security operations?

Generative AI helps Rapid7's SOC teams quickly identify and mitigate threats, reducing false positives and improving incident response times.

How many security events does Rapid7's AI Engine process weekly?

Rapid7's AI Engine processes over 4.8 trillion security events each week.

How does Rapid7 ensure the accuracy of its AI models?

Rapid7 employs a continuous feedback loop between its frontline analysts and AI/data science team to ensure accuracy and actionable insights.