Assess security module coverage

Defense Matrix maps your licensed Rapid7 modules to a matrix based on NIST Cybersecurity Framework (NIST CSF) functions and CIS Controls v8 asset types. Use the matrix to understand your current coverage, identify gaps, and find modules that increase coverage.

Before you begin

Defense Matrix uses your organization’s licensed Rapid7 modules and the module data available to your user account. For the most accurate results, confirm that your modules are deployed, connected, and reporting data.

Understand the matrix

Defense Matrix uses a 6 by 6 matrix. Columns represent NIST CSF functions, and rows represent CIS Controls v8 asset types. Each cell represents the intersection of an asset type and a function. For example, the Devices and Identify cell represents coverage for identifying devices in your environment.

Coverage status

Each cell shows whether your licensed modules cover that area.

Each cell has one of these statuses:

• Covered - At least one licensed Rapid7 module provides coverage for this area.
• Not Covered - Rapid7 modules can provide coverage for this area, but none are licensed.
• Not Applicable - No Rapid7 module provides coverage for this area.

Explore coverage by module

Select the modules you own in the Licensed Modules section to see how they affect your coverage. The banner and matrix update with each selection, so you can see which areas your modules cover and which they don’t. Rapid7 selects modules from your license automatically.

Select licensed modules

Match the matrix to the modules your organization owns to see your actual coverage.

To see how your licensed modules affect coverage:

1. From Command Home, select the Defense Matrix tab.
2. In the Licensed Modules section, select each module you own. The banner updates to show how many cells your modules cover and the percentage of the matrix they represent. Cells that your modules cover change from Not Covered to Covered.
3. To restore the default selections, select Reset.

View cell details

Select a cell to see its coverage status and which modules contribute to it.

To see which modules affect a cell:

1. From Command Home, select the Defense Matrix tab.
2. Select a cell to view its details.
   • Coverage Status - Whether at least one selected module covers the cell.
   • Contributing Modules - Selected modules that cover the cell.
   • Missing Modules - Modules that can cover the cell but aren’t selected. Each is labeled Not licensed.

Review module recommendations

Defense Matrix recommends unlicensed Rapid7 modules that can improve your coverage. Recommendations are ranked by impact. Modules that cover the most additional cells appear first in the Recommendations section.

Export a Defense Matrix report

Export a PDF report to share your coverage results, recommendations, and action items with leadership, compliance stakeholders, or your Rapid7 account team.

To export a Defense Matrix report:

1. From Command Home, select the Defense Matrix tab.
2. Select Export PDF.