Rapid7 InsightVM Setup for Workbench

This guide describes how to connect Rapid7​ InsightVM to Workbench and add Rapid7​ console access.

Step 1: Get the API Credentials from Rapid7​ VM

An organization API key allows access to InsightVM product APIs, and can only be generated by administrators.

1. Log in to the Rapid7​ console as an administrator.

2. In Insight Platform, select Home.

3. Select API Key Management.

1. Select Organization Keys.

2. On the Organization Keys screen, select Generate New Organization Key.

3. Enter your organization name.

4. In the ExpelAPI field, enter the Expel API key. We suggest ExpelAPI.

5. Generate the key by selecting Submit.

6. A window opens to display the generated key. Copy and save the key for later use in Workbench.

Step 2: Add a Rapid7​ InsightVM Console User

Expel's device health team uses console access to investigate potential health issues with your tech. Having access to the interface of your technology allows Expel to dig deeper during incident investigation and supports programmatic vulnerability scanning (i.e. scan details, tagging, asset types, exceptions, and other features). Learn more about why we need console access.

1. In Insight Platform, select Settings > User Management.

2. Select Add User.

3. In the Email field, enter "soc+<Your_Organization_Name>@expel.io".

   • For example, if your organization were Acme Corp, the format would be "[e-mail]".

4. In the First Name field, enter SOC.

5. In the Last Name field, enter Expel.

6. In the Time Zone field, select UTC.

7. In Product Roles, select Admin.

8. Select Submit.

The user is now added to InsightOps, which generates an email to the SOC team to activate the account.

Step 3: Add Rapid7​ API Credentials to Workbench

You can now add Rapid7​ InsightVM to Workbench.

1. Log in to Workbench.

2. In the side menu, navigate to Organization Settings > Security Devices. If you have multiple organizations, you must select the appropriate organization name from the list.

3. Select Add Security Device.

4. In the search box, enter “Rapid7” and then select the Rapid7 InsightVM integration.

5. Complete the fields as follows:

   • Name - enter the name of the device.

   • Location - enter the location of the device.

   • API Key - provide the key that was generated in Step 1.

   • Region - enter the location of Rapid7​.

6. Select Save.

7. In the How will you access the console field, select Set up now (recommended).

8. Complete the fields:

   • In the Console URL field, enter "https://insight.rapid7.com".

   • In the Username field, enter "soc+<Your_Organization_Name>@expel.io".

9. Select Save.