Rapid7 bolsters commence source security with Velociraptor acquisition

Cybersecurity company Rapid7 the day earlier than this day announced it has got Velociraptor, an commence source platform inquisitive about endpoint monitoring, digital forensics, and incident response. Terms of the deal weren’t disclosed.

Founded in 2000, Rapid7 offers a range of security-focused tools spanning functions and the cloud, including vulnerability management, orchestration and automation, and detection and response. With purchasers comparable to Autodesk, First Republic Bank, Kimberly-Clark, Hilton, and Univision and the pandemic driving digital transformation across industries, Rapid7 has been on a plod all the way in which thru the final 12 months. If fact be told, its part value has nearly doubled.

Australian company Velocidex developed Velociraptor as an commence source endpoint visibility tool in 2018. It’s designed to relieve digital forensics and incident response (DFIR) security teams proactively learn about for malicious actions across all devices and entry aspects to a network.

With this deal, Velociraptor will seemingly be higher positioned to ranking bid and persevered funding from a billion-dollar cybersecurity monumental. Velocidex founder Mike Cohen added that Velociraptor will additionally ranking greater publicity thru convention and community events, which may want to easy lengthen participation in the mission globally.

“Rapid7 will enable Velociraptor to graduate to the ‘next level’ by methodology of scale, fashion scurry, steadiness, and functionality by drawing on a monumental sequence of capable and experienced people to relieve the mission,” Cohen wrote in a blog post.

Open-sourced

Boston-based mostly entirely mostly Rapid7 has something of a music report in the commence source security sphere, having got Metasploit support in 2009. There are advantages to pursuing a community-pushed ethos in cybersecurity — in actuality, the extra eyeballs tethered to a share of utility, the extra potentialities flaws or vulnerabilities will seemingly be stumbled on promptly. And the menace is urgent. Within the previous few months on my own, on the least two mighty security utility services have fallen sufferer to exploits. Fireye became once reportedly hacked in a negate-sponsored attack, and factual this week cybersecurity company Sonicwall confirmed that just a few of its clients were focused the exercise of a previously undisclosed vulnerability in its electronic mail security product.

If fact be told, all utility — commence source or in any other case — can change into vulnerable if it’s skipped over. But commence source holds greater doable for strong security, on condition that it attracts on the collective data of a community. Here’s why companies invest basic resources in supporting and affirming mission-basic commence source utility. The Linux Foundation, let’s assume, has space up the The Core Infrastructure Initiative (CII) with relieve from Amazon, Google, Microsoft, Intel, and others to ensure commence source initiatives are sufficiently supported. And earlier this one year, Google announced it could perhaps well well be funding the salaries for 2 developers to present a boost to Linux’s security.

In cybersecurity, particularly, attackers most effective want to get fortunate once when shopping for a weak point to exercise, whereas defenders want to duvet all entry aspects to a network at all conditions. The true fact that unique vulnerabilities advance to light on a day to day basis highlights why a community-led (i.e. commence source) capacity to cybersecurity makes sense.

With Velociraptor on board, Rapid7 acknowledged this could proceed to manufacture and work with the community around it, and — as that that you can well ask — “leverage its skills and insights” to present a boost to Rapid7’s personal incident response talents. Per Cohen, who now joins Rapid7 to proceed main the Velociraptor mission, there don’t seem like any prompt plans to commercialize Velociraptor at once.