Cloud Risk Complete

Welcome to Cloud Risk Complete!

What is CRC?

Cloud Risk Complete (CRC) allows you to identify and manage risk across cloud environments, endpoints, on-premises (on-prem) infrastructure, and web applications, while also providing hands-on onboarding support to accelerate time to value and reduce friction in the deployment process.

CRC provides a comprehensive view of risk across your deployment and enhances efficiency with automated workflows by combining the capabilities of InsightCloudSec, InsightVM, InsightAppSec, and InsightConnect.

Which package is right for me?

We currently offer two package options for Cloud Risk Complete:

  • CRC Essential is for smaller security teams that are just getting started or are in the early days of migrating their applications and services to the cloud while still requiring strong risk management for their on-prem infrastructure.
  • CRC Advanced is for security teams looking to improve efficiency, drive risk reduction at scale, and secure their cloud environments and applications from development to production.

Feature comparison

The following table lists key differences between the two packages at a feature-level.

Links to capability descriptions go to the InsightCloudSec documentation which currently has a different look and feel than most other Rapid7 products.

Included CapabilityEssentialAdvanced
Multi-cloud visibility across AWS, Azure, GCP, K8s, and more✓✓
Agentless cloud and container vulnerability management✓✓
Cloud security posture management (CSPM)✓✓
Kubernetes security posture management (KSPM)✓✓
Cloud contextual risk prioritization (Layered Context)✓✓
Infrastructure as Code (IaC) Security✓✓
Cloud identity risk assessment (CIEM)✓✓
Cloud automation (Bots): Notifications and integrations✓✓
Cloud threat detection findings and response-✓
Cloud automation (Bots): Actions and remediations-✓
Advanced real-time cloud visibility with Event-Driven Harvesting (EDH)-✓
InsightCloudSec custom harvesting strategies-✓
InsightCloudSec extension via plugins-✓
InsightCloudSec data collections for reusable data definitions-✓
InsightCloudSec self-managed deployment-✓
Unlimited on-premises vulnerability management (by InsightVM)✓✓
Unlimited automated security workflows (by InsightConnect)✓✓
Unlimited dynamic application security testing (by InsightAppSec)-✓

Onboarding experiences

The following table lists the different experiences and onboarding timelines for each of the CRC offerings.

Implementation Success PackageEssentialAdvanced
Dedicated Onboarding Success Manager (OSM)✓✓
InsightCloudSec2 days2 days
InsightVMWorkshops & Technical Assistance2 days
InsightAppSecN/A1 day
InsightConnectWorkshops & Technical AssistanceWorkshops & Technical Assistance
Advisory SessionsWebinar series2 days

Get started with Cloud Risk Complete

To get started with this solution, complete the contact form on the Rapid7 Cloud Risk Complete page: https://www.rapid7.com/solutions/unified-cloudsec-vm-appsec/get-started/

Learn more