Does this skill help with compliance audits like PCI-DSS?

Yes, it includes specific guidance on using specialized scan templates designed for PCI ASV audits, HIPAA compliance, and CIS benchmarking.

Can I automate scan triggers using Python?

Yes, this skill provides a structured Python client example using the InsightVM API v3 to list sites, trigger scans, and manage remediation projects.

Can the InsightVM Security Console be deployed in a container?

No, Rapid7 does not currently support running the Security Console in containerized environments; it must be installed on a dedicated Linux or Windows server.

What is the benefit of authenticated scanning over unauthenticated?

Authenticated scanning allows InsightVM to log into the target system, identifying 60-80% more vulnerabilities by inspecting local software versions and configurations that are invisible from the network.

How do I scan remote workers who aren't on the office network?

The Rapid7 Insight Agent is the recommended solution for remote assets, as it provides continuous assessment and reports back to the console without needing a network-based scan.

Rapid7 InsightVM Vulnerability Scanning

Name: Rapid7 InsightVM Vulnerability Scanning
Author: micsapp

bymicsapp

0•

安全与测试

Deploys and configures Rapid7 InsightVM for comprehensive vulnerability management and automated security scanning across enterprise environments.

This skill provides expert guidance for implementing Rapid7 InsightVM (formerly Nexpose), covering the full lifecycle from Security Console installation to advanced API automation. It helps security teams deploy distributed Scan Engines, configure authenticated scanning for Windows and Linux systems, and integrate Insight Agents for continuous monitoring of remote assets. By following these patterns, users can establish robust vulnerability management workflows that align with compliance standards like PCI-DSS and HIPAA while leveraging automated remediation tracking to reduce organizational risk.

主要功能

01Custom scan template optimization for CIS, PCI, and HIPAA compliance

02Insight Agent integration for remote and roaming endpoint coverage

03Authenticated scanning configuration for Windows, Linux, and Databases

04Security Console and Scan Engine deployment workflows

05Python-based API automation for ad-hoc scanning and remediation

060 GitHub stars

使用场景

01Building an enterprise-wide vulnerability management program from scratch

02Automating security assessments within CI/CD pipelines using the InsightVM API

03Configuring deep-dive authenticated scans to identify hidden system vulnerabilities

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills implementing-rapid7-insightvm-for-scanning

For use in Claude.ai and ChatGPT

主要功能

01Custom scan template optimization for CIS, PCI, and HIPAA compliance

02Insight Agent integration for remote and roaming endpoint coverage

03Authenticated scanning configuration for Windows, Linux, and Databases

04Security Console and Scan Engine deployment workflows

05Python-based API automation for ad-hoc scanning and remediation

060 GitHub stars

使用场景

01Building an enterprise-wide vulnerability management program from scratch

02Automating security assessments within CI/CD pipelines using the InsightVM API

03Configuring deep-dive authenticated scans to identify hidden system vulnerabilities

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills implementing-rapid7-insightvm-for-scanning

For use in Claude.ai and ChatGPT