Rapid7 InsightConnect
rapid7.com
What it is
Rapid7 InsightConnect is a security orchestration, automation, and response product for building workflows across technologies, people, and processes. It provides templates, a no-code builder, and visibility into workflow steps. Rapid7 lists more than 300 plugins with predefined actions and triggers. Example workflows include phishing investigations, disabling Active Directory users, vulnerability remediation, and incident response. Workflows can include manual tasks and require human authorization before automated actions proceed. Some run entirely in Insight Cloud; many need an Orchestrator server in the customer’s network or cloud environment. That server runs on a virtualized Ubuntu appliance or dedicated RHEL host, and plugins require Docker Community Edition. Listed platforms include API, Linux, self-hosted, and web, and Rapid7 supports the latest stable versions of Firefox and Chrome. A 30-day free trial is listed at free, but workflows in the listed toolkits require an InsightConnect license. The product is hybrid, and pricing is available on request.
Spec sheet
- Purpose
- Automation (InsightConnect) is a SOAR solution for integrating technologies, people, and processes into automated security workflows.Read 2 Oct 2026 · docs.rapid7.com
- Audience
- Rapid7’s documentation recommends its SOC success plan for InsightIDR users and its VM success plan for InsightVM users.Read 2 Oct 2026 · docs.rapid7.com
- Deployment
- Some workflows run entirely in Insight Cloud, while many require an Orchestrator server in the customer’s network or cloud environment.Read 2 Oct 2026 · docs.rapid7.com
- Integrations
- Rapid7 says InsightConnect has over 300 plugins with predefined actions and triggers for connecting tools, utilities, and public resources.Read 2 Oct 2026 · docs.rapid7.com
- Support
- Rapid7 lists a Product Support Portal and a product support phone number of +1-866-390-8113.Read 2 Oct 2026 · rapid7.com
- Browser support
- Rapid7 supports the latest stable versions of Mozilla Firefox and Google Chrome for InsightConnect.Read 2 Oct 2026 · docs.rapid7.com
- Human oversight
- Workflows can include manual actions and human authorization before automated actions are executed.Read 2 Oct 2026 · docs.rapid7.com
- Orchestrator requirements
- The Orchestrator runs on a virtualized Ubuntu appliance or a dedicated RHEL host and requires Docker Community Edition for plugins.Read 2 Oct 2026 · docs.rapid7.com
- Security and trust
- Rapid7 describes its trust approach through security, availability, privacy, and transparency pillars.Read 2 Oct 2026 · rapid7.com
- SOAR capability positioning
- Rapid7’s current SOAR page describes connecting tools, analyst oversight, automated enrichment, approvals, notifications, active response, and guided containment.Read 2 Oct 2026 · rapid7.com
- Use cases
- Rapid7 describes workflows for phishing investigations, disabling Active Directory users, vulnerability remediation, and incident response.Read 2 Oct 2026 · docs.rapid7.com
- Workflow builder
- It provides out-of-the-box workflow templates, a no-code builder, and visibility into each workflow step.Read 2 Oct 2026 · docs.rapid7.com
- Workflow license limit
- Rapid7 states that workflows in its listed InsightConnect toolkits require an InsightConnect license for use.Read 2 Oct 2026 · docs.rapid7.com
Plans and prices
Strong points and limits
Strong points
- No-code workflow builder and ready-made templates
- Over 300 plugins with predefined actions and triggers
- Supports manual actions and human authorization
- 30-day free trial
Limits
- Pricing is available on request
- Toolkit workflows require an InsightConnect license
- Many workflows need a customer-managed Orchestrator server
- Plugins require Docker Community Edition
Who it suits
InsightConnect suits security teams building automated workflows that connect tools and operational processes. Teams that need oversight can include manual steps and human authorization before actions run.
Verdict
InsightConnect combines workflow automation with manual oversight and a broad plugin set. Teams should account for its license requirement and the Orchestrator and Docker setup needed for many workflows.
Where Specifiction places it
- Runbook Automation Software#7 of 247.6
- Security Orchestration, Automation, and Response Software#7 of 247.5
- SOAR Software#7 of 227.6