SecurityBrief Asia - Technology news for CISOs & cybersecurity decision-makers
Story image
Rapid7 unveils AI-powered cloud anomaly detection solution
Tue, 21st Nov 2023

Rapid7, a renowned entity in extended risk and threat detection, has announced the unveiling of a progressive innovation in AI-driven threat detection for the cloud. The company is currently offering early access to its selected customers. This establishment is designed to enhance SOC teams' capacity to spot and react swiftly to cybersecurity threats in public cloud environments.

The firm's cloud anomaly detection is a state-of-the-art, AI-powered detection apparatus built to identify and prioritise unusual activity in the operating organisation's cloud environment. The unique AI engine learns and adapts continually to the client's cloud settings, highlighting any suspicious tactics whilst automatically muting harmless signals to cut down on background noise. This innovation leads to a significant drop in false positives and allows teams to concentrate on probing and responding to active threats.

Implemented within the Rapid7 platform, native automation can instantly adjust configurations, correctly size permissions, and privileges, and incorporate SOC, engineering, and IT teams into incident investigations once such unusual activity is identified.

Aniket Menon, Vice President of Product Management at Rapid7, commented on the problem of identifying threats in the cloud, stating: “This is a challenging issue for organisations to resolve. This is crucial in the SOC environment, where teams can't squander time investigating harmless alerts. We constantly strive to lower a customer's average response time, particularly in vibrant cloud environments where AI and ML are critical in dealing with the speed and volume of alerts to allow successful investigation and response."

Rapid7's cloud anomaly detection merges with cloud providers' services to help detect recognised and unfamiliar threats before and reflect true-positive alerts. Rapid7 customers can now access these cloud threat detections in their investigation and response procedures on a singular SecOps platform.

Currently, this cloud anomaly detection solution is accessible to select Rapid7 customers on Amazon Web Services (AWS). The company is exhibiting its cloud anomaly detection solution at AWS re:Invent 2023 from November 27 to December 1 in Las Vegas.