Rapid7 InsightCloudSec

Rapid7 InsightCloudSec (formerly DivvyCloud) is a fully integrated Cloud-Native Application Protection Platform (CNAPP) engineered to deliver continuous security, compliance, and governance across multi-cloud environments including AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud, and Alibaba Cloud. Combining Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), Cloud Workload Protection (CWPP), and Infrastructure as Code (IaC) security into a single platform, InsightCloudSec enables cloud engineering and security teams to eliminate misconfigurations, enforce least-privilege IAM policies, and prevent cloud security breaches.

The platform utilizes a real-time, event-driven data collection engine that detects cloud resource modifications within seconds of creation or reconfiguration. Key capabilities include automated real-time discovery of multi-cloud assets, continuous posture assessment against hundreds of security frameworks (including CIS Cloud Benchmarks, NIST CSF, and PCI-DSS), automated identity entitlement analysis that identifies excessive IAM privileges, agentless workload vulnerability scanning, and automated remediation bots (Bots) that autonomously fix security drift (e.g., closing open security groups or encrypting S3 buckets) without requiring human intervention. By shifting security left, it also scans Terraform and CloudFormation templates in CI/CD pipelines to block insecure cloud infrastructure before deployment.

InsightCloudSec integrates natively with AWS, Azure, GCP, Kubernetes, Terraform, GitHub, Jenkins, Jira, Slack, and Rapid7 InsightConnect. Common enterprise use cases include achieving automated multi-cloud compliance, eliminating excessive cloud IAM permissions, automating real-time cloud misconfiguration remediation, and enforcing shift-left security governance across DevOps teams. Rapid7 InsightCloudSec delivers continuous multi-cloud visibility, automated remediation, and comprehensive CNAPP protection.