SOLUTION BRIEF

Container Monitoring and Security
Secure, optimize, and gain visibility into yourcontainer infrastructure with Rapid7
The rise of Docker containers has fundamentally changed the way organizations think about architecting, building, testing,and deploying their applications. If you’re in DevOps, that’s great news—containers allow you to build and deliver services
and applications faster than ever before. But security and IT professionals recognize that despite their immediate benefits,
new technologies typically bring new operational and security challenges. Central to it all? Visibility.
Enter Rapid7 InsightVM, InsightAppSec, and InsightOps: Our solutions are uniquely built to help IT and security teams
establish best-practice programs for monitoring and protecting container infrastructure that leave no blind spots behind.
Whether it’s through our industry-leading products or expert consultants, Rapid7 has got every corner of your ecosystem(including your container images) covered.

THE RAPID7 DIFFERENCE

THE MORE YOU SEE, THE MORE YOU CAN PROTECTYour risk exposure is constantly in flux, and the risks associated with containerization are no exception. Containers are usuallychurned out rapidly by development teams, with security teams only becoming aware of their existence by chance; greatfor speedy application development, not so great for keeping your network secure. InsightVM, Rapid7’s leading vulnerability
scanner, empowers you to discover and understand your container-oriented risk.

DEL IVERYCO N F I GURAT I O N

Increase visibility of where Docker
hosts live in your world and dive deeper
into the activity around your container
images.

DELIVER
Identify container hosts that do notcomply with CIS benchmarks for commonOSes and Docker itself, and use thisinsight to guide future remediation.

ASSE SSM E N TDELIVER

Perform vulnerability assessments
across the components and layers of acontainer image, with full searchability
by cryptographic hash or container
metadata.

InsightVM’s Liveboard feature automatically correlates assessed images with those discovered in your environment, giving
you real time visibility into the risk posed by containers in your network. We didn’t stop there: InsightVM is also designed toautomatically assess container registries, both public and private. Did we mention this all comes at no additional cost?

110817

Delve deeper into your risk posture: Start your InsightVM 30-day free trial today.

APPLICATION SECURITY, MODERNIZEDFOR TODAY’S INFRASTRUCTURE
InsightAppSec, Rapid7’s application scanning tool, is powered by Gartner’s
top-rated dynamic application security testing technology. InsightAppSec
has been specially designed to comprehensively scan for security flaws in
the modern web applications that containers are built for. Within minutes ofdeployment, you’ll be up and running to scour modern internal and external
web apps for exposed application risks with InsightAppSec’s crawling andattack engine. InsightAppSec’s results and reporting are also developerfriendly, and include features like Attack Replay which empower developers
to validate vulnerabilities and test fixes on their own. An integration withAtlassian Jira ensures security and development teams stay in lockstep withone another.
The end result? Fewer vulnerabilities missed and a quicker path toremediation. For all security-savvy overachievers, combine InsightAppSec’s
application scanning capabilities with InsightVM to ensure your security risk
is managed from infrastructure up to the application layer.
Secure your application layer: Request an InsightAppSec demo today.

insightOps
MONITORING AND TROUBLESHOOTINGYOUR CONTAINER ENVIRONMENT
Containerization makes it easier for teams to develop, test, and releasesoftware as microservices, but it also introduces a variety of new operational
challenges. First, the ephemeral, vastly distributed nature of microservices
often leads to vastly distributed data—a result that makes it trickier to know
where to look when troubleshooting. Second, monitoring the operational
health of the container environment itself becomes an increasingly
challenging task as your environment evolves. This is where InsightOps
comes in; built with microservice best practices in mind, Rapid7 offers its
own container image on DockerHub for monitoring and troubleshooting
modern container environments.
Running the Rapid7 container automatically forwards logs from every
container in your Docker environment to InsightOps, where they can bemonitored along with the rest of your operational data. The Rapid7 container
also leverages the Docker API to stream stats about your containers directly
to your InsightOps account, and InsightOps will recognize and monitor newcontainers as they start without the need for reconfiguration. With all of yourcontainer data in InsightOps, it’s easy to search logs, create alerts, generatereports, and visualize key trends in your container environment, significantly
simplifying your monitoring and troubleshooting experience.
Unify data across your container environment:
Start your InsightOps 30-day free trial today.

AUGMENT YOUR SECURITY
STRATEGY WITH RAPID7SERVICES
Securing containers are just asmall piece of a healthy securitystrategy. Rapid7’s Advisory Services
professionals have decades ofexperience building out security
programs, and can help you create
long-term road maps so yourbusiness stays secure as it gets more
efficient. Looking for a special team
to augment your existing security &IT capabilities? Our ManagedVM andManaged AppSec offerings offload thehandling of our top-rated vulnerability
management and DAST solutions toour resident experts, who will not
only run your scans, but also validate
and prioritize your vulnerabilities. Ourpenetration testers can also ensurethat the security controls you’ve put
in place to protect your new virtualinfrastructure are working properly andkeeping the bad guys out.
Don’t go it alone: Learn more about
Rapid7 Services.

READY TO GET STARTED?
Contact our sales team at 866.7.RAPID7
or sales@rapid7.com.
Learn more about how Rapid7 can help
with your containerized infrastructureat www.rapid7.com/solutions/containers-and-docker-security.