- Home
- Security Orchestration, Automation, and Response Software
- Rapid7 InsightConnect
Rapid7 InsightConnect
What it is
Rapid7 InsightConnect is a security orchestration, automation, and response solution for building workflows that connect technologies, people, and processes. It provides ready-made templates, a no-code builder, and visibility into each workflow step. Rapid7 lists more than 300 plugins with predefined actions and triggers for connecting tools, utilities, and public resources. Described uses include phishing investigations, disabling Active Directory users, vulnerability remediation, and incident response. Workflows can include manual actions and require human authorization before automated actions execute. Some workflows run entirely in Insight Cloud, while many require an Orchestrator server in a customer network or cloud environment. The Orchestrator runs on a virtualized Ubuntu appliance or dedicated RHEL host and requires Docker Community Edition for plugins. Rapid7 supports current stable Firefox and Chrome versions. A 30-day free trial is listed as free, but workflows in listed toolkits require an InsightConnect license. Pricing is available on request.
For and against
For
- No-code workflow builder with step visibility
- Over 300 plugins provide actions and triggers
- Supports manual approvals before automation
- Handles phishing and remediation workflows
- 30-day free trial listed
Against
- Toolkit workflows require an InsightConnect license
- Many workflows need an Orchestrator server
- Orchestrator requires Ubuntu or RHEL hosting
- Pricing is available on request
The verdict
InsightConnect combines workflow automation, integrations, enrichment, and human oversight for security operations. Deployment requirements and licensing conditions should be reviewed before adoption.
Who it suits
InsightConnect suits security teams automating response workflows across connected tools while retaining analyst approvals. Its hybrid deployment fits organizations able to operate the required Orchestrator infrastructure.
Plans and prices
Automation (InsightConnect) 30 day free trial
30 days · workflows in toolkits require an InsightConnect license
Read 2 Oct 2026 · docs.rapid7.com
On the record
- Audience
- Rapid7’s documentation recommends its SOC success plan for InsightIDR users and its VM success plan for InsightVM users.docs.rapid7.com · read 2 Oct 2026
- Browser support
- Rapid7 supports the latest stable versions of Mozilla Firefox and Google Chrome for InsightConnect.docs.rapid7.com · read 2 Oct 2026
- Deployment
- Some workflows run entirely in Insight Cloud, while many require an Orchestrator server in the customer’s network or cloud environment.docs.rapid7.com · read 2 Oct 2026
- Human oversight
- Workflows can include manual actions and human authorization before automated actions are executed.docs.rapid7.com · read 2 Oct 2026
- Integrations
- Rapid7 says InsightConnect has over 300 plugins with predefined actions and triggers for connecting tools, utilities, and public resources.docs.rapid7.com · read 2 Oct 2026
- Orchestrator requirements
- The Orchestrator runs on a virtualized Ubuntu appliance or a dedicated RHEL host and requires Docker Community Edition for plugins.docs.rapid7.com · read 2 Oct 2026
- Purpose
- Automation (InsightConnect) is a SOAR solution for integrating technologies, people, and processes into automated security workflows.docs.rapid7.com · read 2 Oct 2026
- Security and trust
- Rapid7 describes its trust approach through security, availability, privacy, and transparency pillars.rapid7.com · read 2 Oct 2026
- SOAR capability positioning
- Rapid7’s current SOAR page describes connecting tools, analyst oversight, automated enrichment, approvals, notifications, active response, and guided containment.rapid7.com · read 2 Oct 2026
- Support
- Rapid7 lists a Product Support Portal and a product support phone number of +1-866-390-8113.rapid7.com · read 2 Oct 2026
- Use cases
- Rapid7 describes workflows for phishing investigations, disabling Active Directory users, vulnerability remediation, and incident response.docs.rapid7.com · read 2 Oct 2026
- Workflow builder
- It provides out-of-the-box workflow templates, a no-code builder, and visibility into each workflow step.docs.rapid7.com · read 2 Oct 2026
- Workflow license limit
- Rapid7 states that workflows in its listed InsightConnect toolkits require an InsightConnect license for use.docs.rapid7.com · read 2 Oct 2026
