ThreatBook

Rapid7 Managed Detection and Response (MDR) is a 24/7 expert-led security service designed to detect, investigate, and respond to threats across the entire attack surface. It delivers managed extended detection and response (MXDR) by correlating signals from endpoints, cloud, network, and third-party security tools. Rapid7 MDR combines advanced technology with a global SOC to provide continuous monitoring and rapid threat containment. The service offers high-fidelity endpoint detection, proactive threat hunting, and managed next-generation antivirus and ransomware prevention. Rapid7 MDR provides full visibility into security activity through integrated SIEM and XDR capabilities, avoiding black-box operations. Unlimited digital forensics and incident response ensure threats are fully eradicated without caps or additional costs. By unifying detection, response, and vulnerability management, Rapid7 MDR helps organizations reduce risk and improve security outcomes.

alphaMountain’s domain and IP threat intelligence powers many of the world’s leading cybersecurity solutions. High-fidelity threat feeds are updated hourly with fresh URL classification, threat ratings and actionable intelligence on over 2 billion hosts including domains and IP addresses. KEY BENEFITS: Get high-fidelity URL classification and threat ratings for any URL from 1.00 to 10.0. Receive fresh categorization and threat ratings updated every hour, syndicated via API or threat feed. See threat factors and other intelligence contributing to threat verdicts. USE CASES: Use threat feeds in your network security products such as secure web gateway, secure email gateway or next-generation firewall. Call the alphaMountain API from your SIEM to investigate threats or from your SOAR to automate responses such as blocking and policy updates. Detect if a URL is suspicious, contains malware, is a phishing site and which of 89 content categories the site belongs to.