Partner Newsletter - November 2023

Rapid7 Announces AI-Driven Cloud Anomaly Detection

Cloud Anomaly Detection provides AI-driven detection of anomalous activity occurring across customers’ own cloud environments, with automated prioritization to assess the likelihood that activity is malicious. SOC teams benefit from a consolidated view that aggregates threat detections from CSP-native detection engines and Rapid7’s proprietary detections, with easy API-based ingestion into XDR/SIEM tools for threat investigations and prioritizing remediation efforts.

Be sure to check out the press release and blog highlighting the launch of Cloud Anomaly Detection, as well as the dedicated Rapid7 webpage. A dedicated solution brief is also available for sharing directly with customers and prospects who would like to learn more about Cloud Anomaly Detection.

What’s New in D&R

SEC Disclosure Policy Preparedness

The US Securities & Exchange Commission (SEC) has introduced regulations to ensure organizations have adequately planned for cybersecurity risk and are well positioned to provide timely incident disclosure. As the rules begin for most publicly traded organizations as early as December 15th of 2023, we’ve released some collateral to help support organizations navigate this change.

Find out more here: SEC Compliance Regulations Solution Brief

What's New in ICS & VM

Introducing Cloud Anomaly Detection, Now available in Early Access for AWS Customers:

Cloud Anomaly Detection provides AI-driven detection of anomalous activity occurring across customers’ own cloud environments, with automated prioritization to assess the likelihood that activity is malicious. SOC teams benefit from a consolidated view that aggregates threat detections from CSP-native detection engines and Rapid7’s proprietary detections, with easy API-based ingestion into XDR/SIEM tools for threat investigations and prioritizing remediation efforts.

New Risk Score Added to Layered Context

We’re introducing a new risk score in Layered Context, which analyzes all the signals and context we know about a given cloud resource and automatically assigns a score and a severity, making it easy for our customers to understand the riskiest resources they should focus on. Much like Layered Context itself, the new risk score combines a variety of risk signals, assigning a higher risk score to resources that suffer from toxic combinations, or multiple risk vectors that compound to present an increased likelihood or impact of compromise.

What’s new in the Partner Portal

MDF Dashboard

As we progress into the quarter, partners who have submitted Q4 requests will now be able to see the approval details, including purchase order numbers, within their MDF Dashboards.

Please don’t forget to make your claim/s against all joint marketing activities that have been completed. For Q1, Q2 and Q3 2023, please use this claim form. For Q4 MDF activities completed, or due to complete, please submit your claim via the partner portal. All completed 2023 MDF Claims should be submitted, with supporting ROI evidence, before the 8th of December. For MDF activities running after this date, please submit your claim form within 30 days of completion.

Looking to next year, please work with your Rapid7 Channel Account Manager to create your 2024 business and joint marketing plans. With your marketing plan in place we can begin to move forward with approving MDF Requests for Q1 2024.

Emerging Threats Notices

Our customer emails are important communications, especially when we share Emerging Threat information. All Rapid7 Emerging Threat customer emails are available for your viewing via the partner portal. When issued they will appear on the portal home page Announcements section as well as the asset file being available within the library.

Global Partner Webinar Series

The Rapid7’s partner webinars continue to deliver a wealth of information on our offers, solutions and around thought leadership. Join us for the upcoming live session listed below:

Top Cybersecurity Predictions for 2024 - Thought Leadership

Tuesday, December 5th 2023, 3:30pm GMT / 10:30am ET

The last 12 months have seen a profound transformation in the security landscape as organizations grapple with a surge in sophisticated cyber threats, ransomware attacks targeting critical infrastructure, and the rise of AI and machine learning to potentially help or hinder cyber defense.

The session will provide insights, discuss disruptive forces shaping cybersecurity, and explore the anticipated shifts and emerging trends helping you to navigate the opportunities and challenges that lie ahead in 2024 and beyond.

Register Here

Stories from the SOC: Remote Access Made (un)Easy

Tuesday, December 12th 2023, 11:00am GMT

Rapid7's Managed Detection and Response (MDR) and Incident Response (IR) teams responded to multiple instances of organizational compromise in which a threat actor employed several unique tools, techniques, and procedures (TTPs), including the legitimate remote access tool, ScreenConnect, to maintain persistent access to the compromised environments.

In this session, learn how Rapid7's MDR service used the visibility and insights to track down and eradicate the threat actor from other organizational environments through the use of open-source intelligence, threat hunting, detection engineering, and ongoing customer partnerships.

Register Here

Don’t forget to visit our new Webinars & Events page on the Rapid7 Partner Portal for the most up to date information on our live, and on-demand, sessions.

Partner Operations

MSSP’s can now onboard new prospects via self-service

This month we will be launching a new capability that allows MSSP partners to onboard new prospects via self-service. This takes a previously multi-week, people intensive process and reduces it down to minutes.

With self-service prospect onboarding, MSSPs can independently create new Managed Customer accounts on the platform to pursue a product POC for IDR and ICON. It also allows for new product POCs to be initiated for an existing managed customer, allowing partners that provide managed IVM to an end-customers to cross-sell IDR easily via self-service.

Regional Channel Updates

In ASEAN and India, Rapid7 has launched a strategic partnership with TruVisor as our exclusive regional distributor for the region. TruVisor is a visionary distributor with cloud and managed services capabilities. Rapid7 offer solutions that focus on Automation & Cybersecurity technologies for our channel partners. With more than 14 years of experience working with IT vendors and resellers, we understand what it takes to succeed. This partnership will focus on our new GTM centred around MTC & CRC.

In ANZ, we have launched a new strategic partnership with Oreta, an esteemed organization known for its excellence. This collaboration is dedicated to simplifying the delivery of top-tier Managed Services addressing complexity and cost concerns. Our joint mission is to empower customers by enhancing their cybersecurity posture, granting them greater insight into their attack surface, heightened capabilities for identifying emerging threats and accelerated response to security incidents. As we navigate this digital landscape, it is imperative for organizations of all sizes to prioritize these services for the safety of their personnel, clientele and stakeholders.

In our APAC region, Rapid7 are currently working through the interview cycle to backfill our CAM in Singapore. We have been inundated with candidates and have shortlisted a handful of strong contenders. This is a critical role for Rapid7 given the size of the region and the need to drive results through our new distributor in TruVisor.

Alongside this role, we are excited to have approval to hire a CAM in India. India is a huge market opportunity for us in APAC and to have someone in country to support the partners, who is driving results, and developing this market. This role is open on our website and we would love to hear from anyone with referrals.

The Latest from the Rapid7 Blog