Rapid7 InsightConnect
Connect Rapid7 InsightConnect to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Record your Rapid7 InsightConnect connection as security automation evidence. Automated collection is not available for this provider yet.
| Category | Security Automation |
| Connect with | API token |
| What a connection produces | Connection record |
Connect with an API token
-
In Rapid7 InsightConnect:
- In the Rapid7 Insight Platform, go to Administration › User API Keys and click Generate New User Key. A user key inherits that user's permissions, so use a user with read-only access.
- Copy the key immediately; it cannot be retrieved later.
- (Alternative, administrators only: Administration › Administrator API Keys › Generate New Organization Key creates an organization-wide super key. Prefer the user key for least privilege.)
Where to find the other values:
- Base URL (optional): https://<region>.api.insight.rapid7.com/connect, where <region> is your data region code (us, us2, us3, eu, ca, au, ap, me1, aps2). Your provisioned data region is shown on your Platform Home page.
Rapid7 InsightConnect shows the secret only once, so copy it before you leave the page.
No vendor-side account or workspace ID is needed for the Insight API key.
Source: docs.rapid7.com, docs.rapid7.com, checked 2026-10-07.
-
On Compliance › Connectors, open Rapid7 InsightConnect, click Connect, choose API token and fill in:
Field What to enter API token / Personal access token Required. Stored encrypted and never shown again. Base URL (optional) — Account / Org / Workspace (optional) — -
Click Connect with token.
Frameworks
Rapid7 InsightConnect publishes no API for what these tests check, so its evidence is an attestation: connect it to record the connection, then attest the result. An accepted attestation counts toward each control below.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Attestation | CC7.4 | 1 |
| ISO/IEC 27001 | Attestation | A.5.26 | 1 |
| HIPAA Security Rule | Attestation | 164.308(a)(6) | 1 |
| PCI DSS | Attestation | 12.10.1 | 1 |
| NIST CSF 2.0 | Attestation | RS.MA-01 | 1 |
These tests are switched on per workspace by the Safeguard team.
Related
- Security Automation connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks