Overview
The Rapid7 Agent (Insight Agent) is lightweight software you can install on supported assets—in the cloud or on-premises—to easily centralize and monitor data on the Insight platform. The Rapid7 Agent (Insight Agent) gives you endpoint visibility and detection by collecting live system information—including basic asset identification information, running processes, and logs—from your assets and sending this data back to the Insight platform for analysis. The Rapid7 Agent (Insight Agent) can be installed directly on Windows, Linux, or Mac assets. Each Rapid7 Agent (Insight Agent) only collects data from the asset on which it is installed.
The Rapid7 Agent (Insight Agent) also offers Endpoint Prevention technology if you are a Managed Threat Complete (MTC) or Managed Detection and Response (MDR) customer with the Next-Generation Antivirus or Ransomware Prevention add-ons. Note if you are a Managed Threat Complete (MTC) Ultimate customer, Ransomware Prevention is already included in your license.
Looking for information on the SIEM (InsightIDR) Endpoint Scan?
SIEM (InsightIDR) customers can use the Endpoint Scan instead of the Rapid7 Agent (Insight Agent) to run “agentless scans” that deploy along the collector and not through installed software. Rapid7 recommends using the Rapid7 Agent (Insight Agent) over the Endpoint Scan because the Rapid7 Agent (Insight Agent) collects real-time data, is capable of more detections, and allows you to use the Scheduled Forensics feature. For more information, read the Endpoint Scan documentation.