Overview
The Rapid7 Agent is lightweight software you can install on supported assets—in the cloud or on-premises—to easily centralize and monitor data on the Command Platform. The Rapid7 Agent gives you endpoint visibility and detection by collecting live system information—including basic asset identification information, running processes, and logs—from your assets and sending this data back to the Insight platform for analysis. The Rapid7 Agent can be installed directly on Windows, Linux, or Mac assets. Each Rapid7 Agent only collects data from the asset on which it is installed.
The Rapid7 Agent also offers Endpoint Prevention technology if you are a Managed Threat Complete (MTC) or Managed Detection and Response (MDR) customer with the Next-Generation Antivirus or Ransomware Prevention add-ons. Note if you are a Managed Threat Complete (MTC) Ultimate customer, Ransomware Prevention is already included in your license.
Looking for information on the SIEM (InsightIDR) Endpoint Scan?
SIEM (InsightIDR) customers can use the Endpoint Scan instead of the Rapid7 Agent to run “agentless scans” that deploy along the collector and not through installed software. Rapid7 recommends using the Rapid7 Agent over the Endpoint Scan because the Rapid7 Agent collects real-time data, is capable of more detections, and allows you to use the Scheduled Forensics feature. For more information, read the Endpoint Scan documentation.