Container Security End-of-Life announcement

As of August 19, 2024, Rapid7 will start the End-of-Life process for the Container Security feature in InsightVM.

Active users of Container Security will continue to have access to Container Security until the feature is officially removed. For those interested in retaining the capabilities of Container Security, feature equivalents are included in our InsightCloudSec product and Exposure Command offering.

Schedule of Events

DateEvent
February 13, 2023Rapid7 announces that Container Security will no longer be supported by InsightVM.
March 13, 2023Rapid7 no longer offers Container Security for prospective InsightVM customers and ends support for non-active users of the feature.
August 19, 2024Rapid7 announces that Container Security is End-of-Life and will be removed from InsightVM.
February 19, 2025Container Security is no longer available in InsightVM.

FAQ

What if I am actively using this feature?

Sustaining security support will continue for the next 6 months for active users. After February 19, 2025, you will not be able to use Container Security.

Reach out to your Customer Success Manager to discuss migration options.

How will I be identified as an active or inactive user?

You are considered an active user of Container Security if you’ve manually assessed an image, a container in your environment has been correlated, a supported registry connection has been added, a Kubernetes monitor has been deployed, or you have a CI/CD plugin.

You are considered an inactive user of Container Security if you have not visited the Containers page in InsightVM for 3 consecutive months. After 3 consecutive months of inactivity, the Container Security feature will be removed.

What is InsightCloudSec?

InsightCloudSec is a fully-integrated cloud-native security platform solution. With InsightCloudSec you can monitor cloud risk in real time, prioritize risk with layered context, automate cloud compliance any way you need, and more. For more information about InsightCloudSec, see our use cases.

What is Exposure Command?

Exposure Command is a Rapid7 offering that combines the power of complete attack surface visibility with high-fidelity risk context and insight into your organization’s security posture. Findings are aggregated from our native exposure detection capabilities for cloud and on-prem (including containers and Kubernetes) in addition to any third-party exposure and enrichment sources you already have in place.

For more information about Exposure Command, review our solution breakdown and overview doc.

What are the benefits of Exposure Command?

The capabilities of Exposure Command create a situational awareness that enables teams to zero-in on the exposures and vulnerabilities that attackers may have in their sights by providing threat-aware risk context that can be used to prioritize more efficiently and effectively.

With Exposure Command’s container security capabilities, you can:

  • Discover and visualize container clusters, nodes, pods, and images across cloud and on-prem environments.
  • Prioritize container vulnerabilities and misconfigurations with additional context, such as public accessibility, attack paths, and application criticality.
  • Assess container resources against hundreds of compliance rules and best practices.
  • Integrate with Kubernetes admission controller to prevent insecure containers from being deployed.

Who should I contact if I have more questions?

Reach out to your CSM or Account Executive with any additional questions.