Rapid7, a pioneer in extended risk and threat detection, announced the launch of Intelligence Hub, an integrated threat intelligence solution designed to provide security teams with meaningful context and actionable insights for accelerated detection and response.
Data overload is a major problem for security teams; two-thirds of SOC analysts responding to a recent survey said the number of security alerts they receive had “significantly increased” in the last three years. In addition, 70% said the number of security tools they work with had “significantly increased.”
Key challenges faced by security teams
Intelligence Hub addresses several key challenges faced by security teams, including siloed intelligence platforms, lack of context, and the inability to prioritise threats effectively.
Rapid7 Labs expertly curates the data delivered through Intelligence Hub, which includes sources that are unique to Rapid7 such as the company’s honeypot data and proprietary research. Low-prevalence, high-impact indicators are rigorously verified to minimise false positives and enable automated responses.
Rapid7 Command Platform
Intelligence Hub provides contextualised data that assigns security teams to prioritise threats
The intelligence is then delivered directly within the Rapid7 Command Platform, bringing high-fidelity, curated intelligence into the security analyst’s workflow. This approach prioritises data that can be trusted, ensuring security teams can focus on the threats that matter most.
“Security organisations are drowning in noise, making timely responses to threats nearly impossible,” said Raj Samani, chief scientist at Rapid7. “Intelligence Hub addresses this challenge by focusing on curated intelligence, providing only the most relevant and verified indicators to enable rapid and effective action.”
In addition to curated intelligence, Intelligence Hub provides contextualised information that empowers security teams to prioritise threats based on their specific industry, geography, and vulnerabilities, as well as the tactics and techniques of threat actors along with a clearly defined methodology for attribution. This allows for targeted remediation and effective resource allocation.
Key benefits of Intelligence Hub
Integrates seamlessly with workflows: Delivers actionable intelligence directly within customers’ existing Command Platform tools—such as Rapid7’s next-gen SIEM, InsightIDR—eliminating context switching and accelerating response
- Cuts through the noise: Surfaces only the most relevant threats based on active attacker campaigns, industry targeting, and exploitability.
- Delivers high-fidelity intelligence: Unifies global threat intelligence expertly curated by Rapid7 Labs researchers from ingestion sources that include data from Rapid7 honeypots, open source communities, and proprietary Labs research.
- Provides meaningful context: Prioritises relevant threats based on sector, geography, and vulnerability exploitation for proactive response.
Challenges with threat intelligence solutions
“In IDC’s October 2024 survey of U.S. organisations, the top three challenges with threat intelligence solutions were cost (42.2%), false positives and alert fatigue (40.0%), and data quality and reliability (39.7%),” said Monika Soltysik, senior research manager at IDC.
“Solution providers that are proactively addressing these challenges, like Rapid7, are making it easier for their customers to understand and secure their attack surface.”
Rapid7 will also be demonstrating Intelligence Hub live at the RSA Conference in San Francisco, April 28 - May 1.
Learn why leading casinos are upgrading to smarter, faster, and more compliant systems
