Rapid7 acquires IntSights, develops contextualised threat intelligence

Rapid7 has acquired IntSights Cyber Intelligence, a specialist in contextualised external threat intelligence and proactive threat remediation.

Under the terms of the agreement, Rapid7 will pay approximately $335 million in cash and stock to acquire IntSights, subject to adjustments.

On the reasoning behind the acquisition, Rapid7 states that with digital transformation the attack surface has increased exponentially, making it an imperative for security teams to have early, contextualised threat detection across their internal and external environments.

However, teams are also often under-resourced and overburdened, inundated with data from their own environment. As a result, there is a growing demand for solutions that help to identify what needs immediate action.

With the acquisition of IntSights, Rapid7 will combine its community-infused threat intelligence and understanding of customer environments with the company's external threat intelligence capabilities.

This combination is intended to provide customers with a unified view into threats, attack surface monitoring, relevant insights, and proactive threat mitigation for organisations of any size or level of security maturity.

The acquisition also enhances Rapid7's cloud native extended detection and response (XDR) offering, InsightIDR, by enabling high-quality, high-fidelity alerts for efficient security operations, earlier threat detection, and accelerated response times, the company states.

According to Rapid7, unlike many other threat intelligence tools in the market today IntSights is able to drive the productivity and outcomes that today's security operations teams need by providing continuous coverage for external threats, from identification to mitigation to remediation.

In addition to enhancing its XDR offering and selling a standalone threat intelligence offering, the company intends to bring IntSights' external threat intelligence capabilities into its platform to unlock faster threat identification and remediation across the company's entire solution portfolio.

Rapid7 chairman and CEO Corey Thomas says,  "Cybersecurity is a lopsided battle today and the odds consistently favour attackers.

"Both IntSights and Rapid7 have a shared belief that organisations will succeed only when they have a unified view of internal and external threats, complete with contextualised intelligence and automated threat mitigation which will allow security teams to focus on the most critical threats. We look forward to working with IntSights to make this vision a reality for our customers.

Rapid7 senior vice president of detection and response Richard Perkett says, "There's no shortage of threat intelligence information available today, but much of it lacks context, creating too much alert noise and additional work for already overburdened security teams.

"By integrating IntSights' external threat intelligence capabilities into Rapid7's XDR solution, InsightIDR, we expect to provide security teams with expanded visibility and detections of internal and external threats across their traditional and modern environments - enabling them to quickly pivot into investigations, threat hunting and containment automation all within a unified experience."

IntSights co-founder and CEO Guy Nizan says, "We founded IntSights to make threat intelligence instantly accessible and actionable for organisations of any type or size.

"We are excited to join Rapid7 to continue this mission and to bring our threat intelligence capabilities to even more customers.