Exposure Command
This common scoring system alone is no longer considered enough for prioritization
What is CVSS?
Our AppSec capabilities fall under this category
DAST
AI attack technique that uses cloned voices to trick employees into wiring money or resetting credentials
Vishing
Where did Josiah work prior to Rapid7?
EF Education First
Unmanaged apps and unsanctioned cloud services that nobody told IT about
What is Shadow IT?
Traditional leader in the NDR space
Darktrace
The frontier AI model developed by Anthropic that can independently discover software vulnerabilities and generate working exploits
Claude Mythos
True or false, Crowdstrike offers network (agent-less) vulnerability scanning
True
This Rapid7 moose was in Josiah's high school graduating class
Paul Adams
What cloudsec capabilities are included in Exposure Command Essentials?
Cloud and Container Vulnerability Management
Cloud Configuration Assessment
The IVM capability that automatically tracks fluctuating assets without manual scans
Dynamic Discovery Connections
The Artificial Intelligence system that can take action on its own to finish a task
Agentic AI
A prospect keeps talking about GreyMatter. What competitor are they referring to?
Reliaquest
Piano
2 minute pitch: how does Rapid7 align to the CTEM framework?
Vulnerability Management - our cornerstone
Risk Prioritization
CAASM/EASM visibility and business context
Cloud Sec/App Sec extends to modern attack surfaces
Vector Command for continuous validation
A malicious attempt to crash or slow down a targeted website, server, or network by flooding it with massive amounts of internet traffic from multiple compromised devices
DDoS attack
The long term goal of Rapid7's AI SOC
Investigate every alert across the environment at scale
What is one thing Arctic Wolf offers that Rapid7 does not?
Managed Security Awareness Training
What was Josiah's dream school growing up
Notre Dame
A prospect has 400 3rd-party assets, 1500 on-prem assets, 60 compute instances, and 5 web applications. What are we licensing them for in ECU?
What is 2000 assets?
3rd-party: 2:1
On-Prem: 1:1
Compute: 1:5
Apps: 1:100
The automated process of merging overlapping or multi-sourced asset and vulnerability records into a single, clean "source of truth"
Deduplication
The 3 main roles of AI in cybersecurity
Attack with AI
Defend with AI
Protect against AI Risk
A prospect is MSFT-heavy and looking at us, Huntress, and Red Canary. Name 3 differentiators that you would anchor your pitch around.
SIEM visibility and ingestion
Visibility in MSFT and beyond
Network Traffic Analysis
Cybersecurity Advisor
What is Josiah's siblings names?
Elisha, Gideon, Naomi