Rapid7 and Modulo Deliver Integrated Vulnerability Risk and IT GRC Solutions to Empower Risk Management Programs

Rapid7 and Modulo today announced they are working together to deliver an holistic view of threat and vulnerability risk, correlated with broader regulatory, policy and compliance risk analysis. The integrated solution enables organizations to identify and manage business impacts as part of a risk management program. As part of the alliance, the companies also announced that penetration testing risk data will be integrated in Q3 2012.

"By bringing together two world-class risk and compliance solutions, we are providing our customers around the world with the contextual business intelligence they need to understand and effectively manage their security risk posture," said Sheldon Malm, head of strategic partners and alliances, Rapid7. "The combination of Nexpose and Risk Manager delivers a tightly integrated solution that is actionable, intuitive, and truly simplifies the customer experience."

Today's organizations require top-down visibility of risk to their assets and business operations. Yet there is no unified way of reporting all IT risks across the vast and layered landscape of security and risk tools, or rating scale for ranking problems. Modulo and Rapid7 have addressed this challenge with a seamlessly integrated business process workflow between Rapid7 Nexpose and Modulo Risk Manager, enabling customers to organize and prioritize thousands of assets and quickly focus on the items that pose the greatest risk to their business.

Benefits of the joint Rapid7 and Modulo offering include:

• Common Repository to Manage all GRC Processes: Perform optimized gap analyses, produce business-related enterprise risk profiles and customized scoring, and prioritize investments according to each asset's potential impact and importance to the organization
• Continuous Discovery of Virtualized Assets: Native integration with VMware vCenter that enables Nexpose to deliver accurate visibility of all virtual assets and their threat exposure
• Rapid7 Real Risk™: Clear insight into the real risk of each unique environment by incorporating information on Exploit Exposure, Malware Exposure, temporal and weighted risk scores as well as CVSS rankings
• Eliminate Redundant Costs and Controls: Modulo Risk Manager is delivered out-of-the-box with one of the industry's most extensive knowledge bases of content cross-mapped with the latest sources of risk, mitigation and multi-regulatory compliance including Sox, PCI, HIPAA, GLBA, FISMA, BASEL II, ISO 27001, BS-25999, COBIT, Shared Assessments and more.
• Unrivaled Breadth of Vulnerability Scanning: Scans for over 22,000 vulnerabilities with more than 75,000 vulnerability checks in networks, operating systems, Web applications and databases across a wide range of platforms

"Hundreds of organizations worldwide choose Modulo Risk Manager due to our comprehensive out-of-the box capabilities. By automating GRC processes and reporting, we help them improve their accuracy and achieve dramatic cost savings. Our joint solution with Rapid7 gives customers a unified framework and dashboard that amplifies this value proposition and reduces overall business risk," said Terence Lee, managing director, North America at Modulo.

The joint solution feeds detailed asset identification and scanning results from across the entire IT environment - including web, network, applications and databases - into a broader IT risk analysis process. Customers can identify how vulnerabilities present risk to specific business operations, processes, and strategic or tactical activities. They can then manage those exposures through remediation workflow.

The validity of these risk scenarios will be further enhanced by executing an advanced penetration test to validate reported exposures and help prioritize remediation steps. Modulo will integrate Metasploit® Professional with Modulo Risk Manager in Q3 2012.

Supporting Links
Twitter: @rapid7
Twitter: @moduloitgrc
Blog: https://community.rapid7.com/community/infosec/blog

About Modulo

Modulo Security, LLC is a leading global enterprise provider of comprehensive Governance, Risk and Compliance (GRC) management solutions. Modulo's award-winning Risk Manager™ provides hundreds of organizations worldwide with the tools they need to automate the entire GRC management process to monitor, manage and sustain adherence to policy and regulations while reducing enterprise risk and complexity. Customers span the financial, health care, retail, telecom, power & gas and government sectors and include BASF, BC Hydro, Commercial Bank of Dubai, Microsoft, New York University Medical Center, Synovus Financial, and Schlumberger. Modulo Risk Manager has earned "Best Buy" and "5-Star" ratings in SC Magazine's 2011 Risk Management group product review and is the winner of the 2011 & 2010 Info Security Products Guide Global Excellence Award, 2010 Network Products Guide Product Innovation Award and 2011 & 2010 SC Magazine Excellence Award Finalist. Visit www.modulo.com and follow Modulo on Twitter @moduloitgrc for more information.

About Rapid7

Rapid7 security analytics software and services reduce threat exposure and detect compromise for 3,000 organizations across 78 countries, including over 250 of the Fortune 1000. We understand the attacker better than anyone and build that insight into our solutions to improve risk management and stop threats faster. We offer advanced capabilities for vulnerability management, penetration testing, controls assessment, incident detection and investigation across your assets and users for virtual, mobile, private and public cloud networks. To learn more about Rapid7 or get involved in our threat research, visit www.rapid7.com.

Media Contact