Manage Bots
Copy link

You can explore and manage your Bots from the Bot Factory. Bot Factory is divided into three sections:

Explore the Bots Listing
Copy link

You can view active Bots on the Listing section of the Bot Factory. Archived Bots are not accessible. You can also:

View Bot details and versions

To view Bot details:

  1. Go to Automation > Bot Factory > Listing.
  2. Find a Bot.
  3. Click the Bot’s Name.

Use the tabs to investigate the Bot’s configuration details and JSON format, run history, non-compliant resources found, and audit and log information.

To view Bot versions:

  1. Go to Automation > Bot Factory > Listing.
  2. Find a Bot.
  3. Click Action (…) > Version History.

You can click Activate to change the active version of the Bot or click Download JSON to share a version.

Update Bot information

You can change superficial Bot information, like name, description, or category, at any time.

To update Bot information:

  1. Go to Automation > Bot Factory > Listing.
  2. Find a Bot.
  3. Click Action (…) > Update Information.
  4. Update information as necessary.
  5. Click Save.

Reconfigure a Bot

You can change a Bot’s configurations using the reconfiguration workflow. You can also unlock a Bot from an Insight. If you reconfigure a Bot, any currently active events will be deleted.

To reconfigure a Bot:

  1. Go to Automation > Bot Factory > Listing.
  2. Find a Bot.
  3. Click Action (…) > Reconfigure.
  4. Optionally, if the Bot was created from an Insight, click Unlock to break the association. However, the Bot will not be updated if the associated Insight (or any Exceptions) are updated.
  5. For Bot Details:
    1. Optionally, update the Bot Name, Category, Severity, or Description.
    2. Click Next.
  6. For Scope:
    1. Change the scope as necessary. If the Bot was created from an Insight, you cannot change the resource type scope.
    2. Click Next.
  7. For Query Filters:
    1. Change or reorder the Query Filters as necessary. If the Bot was created from an Insight, you cannot change or reorder the Query Filters.
    2. Click Next.
  8. For Actions:
    1. Change or reorder the actions as necessary.
    2. Click Next.
  9. For Run Options:
    1. Update the run options as necessary.
  10. Click Save.

Change a Bot’s status

There are two states for a Bot: Active or Paused. You can also archive a Bot, but the Bot will no longer be accessible.

To change a single Bot’s status:

  1. Go to Automation > Bot Factory > Listing.
  2. Find a Bot.
  3. Click Action (…).
  4. Select a status.

To change multiple Bots’ statuses:

  1. Go to Automation > Bot Factory > Listing.
  2. Select the checkbox next as many Bots as necessary.
  3. Select a status.

Create or share a Bot template

Templates can be used to recreate or tune a Bot to fit a different use case. You can create a template from a Bot with or without modifications.

To create a template from a Bot (no modifications):

  1. Go to Automation > Bot Factory > Listing.
  2. Find a Bot.
  3. Click Action (…) > Save As Template.

The template is added to the Templates tab. Review Explore your Bot Templates for details.

To create a template from a Bot (with modifications):

  1. Go to Automation > Bot Factory > Listing.
  2. Find a Bot.
  3. Click Action (…) > Copy.
  4. Optionally, if the Bot was created from an Insight, click Unlock to break the association. However, the Bot will not be updated if the associated Insight (or any Exceptions) are updated.
  5. For Bot Details:
    1. Optionally, update the Bot Name, Category, Severity, or Description.
    2. Click Next.
  6. For Scope:
    1. Change the scope as necessary. If the Bot was created from an Insight, you cannot change the resource type scope.
    2. Click Next.
  7. For Query Filters:
    1. Change or reorder the Query Filters as necessary. If the Bot was created from an Insight, you cannot change or reorder the Query Filters.
    2. Click Next.
  8. For Actions:
    1. Change or reorder the actions as necessary.
    2. Click Next.
  9. For Run Options:
    1. Update the run options as necessary.
  10. Click Save.
ℹ️

Finding a Bot's JSON

To find a Bot’s JSON, go to Bot Factory > Listing, click a Bot Name, then click Copy in the Bot Configuration section. You can import a Bot’s JSON to also create a template.

Trigger a harvest or run a Bot on-demand

After you create a Bot, it is paused by default. This could cause the Bot to miss a cloud account and resource harvesting cycle. You also may want to run a Bot on-demand for testing purposes. You can only trigger a harvest for a Bot or run a Bot on-demand if it is active.

To trigger a harvest for a Bot:

  1. Go to Automation > Bot Factory > Listing.
  2. Find a Bot.
  3. Click Action (…) > Trigger Harvest.
  4. Select a Cloud Account.
  5. Select a Resource Type.
  6. Find a harvester with an upcoming harvest.
  7. Click Action (…) > Enqueue. The harvester will run at the next available opportunity.

To run a Bot on-demand:

  1. Go to Automation > Bot Factory > Listing.
  2. Find a Bot.
  3. Click Action (…) > Ondemand Scan.
  4. Click OK.

Review Bot runs
Copy link

You can review and filter Bot runs from the Bot Runs tab in the Bot Factory.

To review a Bot action:

  1. Go to Automation > Bot Factory > Bot Runs.
  2. Filter the list as needed.
  3. Find a run, then click Action (…) > Review Bot Action.
ℹ️

Bot exceeding threshold?

If a Bot exceeded its threshold, it will have a special Exceeded Threshold state. To fix this issue, you must reconfigure the Bot’s scope or threshold. Review Reconfigure a Bot for details.

Explore your Bot templates
Copy link

Templates can be managed and imported under Bot Factory > Templates.

Example template

{
  "badge_scope_operator": null,
  "category": "Security",
  "creation_timestamp": null,
  "date_created": "2026-01-30 22:04:07",
  "date_modified": "2026-01-30 22:04:07",
  "description": "",
  "detailed_logging": false,
  "errors": [],
  "event_failures": null,
  "exemptions_count": null,
  "hookpoint_created": null,
  "hookpoint_created_delayed": null,
  "hookpoint_destroyed": null,
  "hookpoint_modified": null,
  "hookpoint_modified_delayed": null,
  "hookpoint_tags_modified": null,
  "hookpoint_threat_finding_discovered": null,
  "hookpoint_vulnerability_context_changes": null,
  "insight_id": null,
  "insight_name": null,
  "insight_severity": null,
  "instructions": {
    "action_threshold_count": 10,
    "actions": [
      {
        "config": {},
        "name": "divvy.action.mark_non_compliant",
        "run_when_result_is": true
      }
    ],
    "badges": [],
    "exclusion_badges": null,
    "filters": [
      {
        "config": {},
        "name": "divvy.query.resource_is_exposed_to_public"
      }
    ],
    "groups": [
      "divvyorganizationservice:1"
    ],
    "hookpoints": [],
    "resource_types": [
      "storagecontainer"
    ],
    "schedule": null,
    "schedule_description": null,
    "threshold_mail_recipients": [
      "email_example@rapid7.com"
    ]
  },
  "modified_timestamp": null,
  "name": "Bot Name",
  "next_scheduled_run": null,
  "notes": null,
  "owner": "divvyuser:2540:",
  "owner_name": "Automation Admin",
  "resource_id": "divvybot:1:12236",
  "schedule": null,
  "scope": [
    "divvyorganizationservice:1"
  ],
  "severity": "low",
  "source": null,
  "state": "PAUSED",
  "valid": true,
  "version": null
}

To import a template:

  1. Go to Automation > Bot Factory > Templates.
  2. Click Import Template.
  3. Paste a Bot template’s JSON.
  4. Click Import.

To use a template:

  1. Go to Automation > Bot Factory > Templates.
  2. Find a template.
  3. Click Action (…) > Use Template.
  4. Optionally, if the Bot was created from an Insight, click Unlock to break the association. However, the Bot will not be updated if the associated Insight (or any Exceptions) are updated.
  5. For Bot Details:
    1. Optionally, update the Bot Name, Category, Severity, or Description.
    2. Click Next.
  6. For Scope:
    1. Change the scope as necessary. If the Bot was created from an Insight, you cannot change the resource type scope.
    2. Click Next.
  7. For Query Filters:
    1. Change or reorder the Query Filters as necessary. If the Bot was created from an Insight, you cannot change or reorder the Query Filters.
    2. Click Next.
  8. For Actions:
    1. Change or reorder the actions as necessary.
    2. Click Next.
  9. For Run Options:
    1. Update the run options as necessary.
  10. Click Save.

To delete a template:

  1. Go to Automation > Bot Factory > Templates.
  2. Find a template.
  3. Click Action (…) > Delete.